On August-17-11 8:04 PM Roger Llopart Pla wrote:
> That use, or, if it's a development machine, leave it as it is since it
> does it's work just fine.
> 
> 2011/8/18 Reindl Harald <h.rei...@thelounge.net>
> 
> >
> >
> > Am 18.08.2011 01:30, schrieb Stas Malyshev:
> > > Hi!
> > >
> > >> well but using root as default is a little bit crazy
> > >> using user "test" with empty password is acceptable but root????
> > >>
> > >
> > > It's not _that_ root. For mysql, it's just a default user name.
> > > Most people would run it on development machines with mysql
> > > configured not to answer to network, so it's not of a problem
> >
> > it IS THAT root of mysql
> >
> > please do not believe i think it has anything to do with system-root
> > i am doing this job now since ten years :-)
> >
> > using a build/test-server with mysql-driven pure-ftpd and phpmyadmin
> > while having horde-webmail also on the test-machine and you are f**ed
> > with a mysql-root without password
> >
> > the only sense for the default-root without pwd in mysql is to
> > enter "mysql -u root" and set your pwd directly after install


It strikes me that the out-of-the-box test only works on a fresh clean
install of MySQL. The install docs for MySQL strongly recommend changing
that immediately after the install - which I think most people do - so
I doubt very much those are the credentials for the vast majority of
MySQL installs in the world.

I'm wondering if adding a prompt for the mysql username and password,
with the defaults set as is, would be possible, and if so, if someone
were to offer a patch why it shouldn't be considered.

IMHO, if the defaults were used and the tests ran successfully, I'd
be tempted to display a console message along the lines of "your myself
default root credentials are wide open, are you being silly?" 

Best Regards,

Mike Robinson







-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to