How to make MySQL more secure against decryption experts (transfer)

How to make MySQL more secure against decryption masters [@ more@] when you connect to a MySQL server, you should usually use a password. Passwords are not transmitted on the connection in clear text.

All other information is transmitted as text that can be read by anyone. If you're worried about this, you can use the compression protocol (MySQL3.22 and above) to make things harder. Even to make everything safer, you should install ssh (see http://www.cs.hut.fi/ssh). With it, you can get an encrypted TCP/IP connection between a MySQL server and a MySQL client.

In order to secure a MySQL system, you are strongly required to consider the following recommendations:

Use a password for all MySQL users. Remember, if other_user doesn't have a password, anyone can simply log in as anyone else with mysql-u other_user db_name. For client / server applications, it is a common practice that customers can specify any user name. Before you run it, you can change all users' passwords by editing the mysql_install_db script, or just MySQL root passwords, like this:

CODE: shell > mysql-u root mysql

Mysql > UPDATE user SET Password=PASSWORD (ew_password)

WHERE user= oot

Mysql > FLUSH PRIVILEGES