您好,登錄后才能下訂單哦!
服務(wù)器運(yùn)行環(huán)境:
操作系統(tǒng):CentOS release 6.8 (Final)
Web服務(wù)器軟件:Apache/2.2.15 (Unix)
數(shù)據(jù)庫(kù)系統(tǒng):MySQL 5.1.73
對(duì)默認(rèn)的CactiEZi中文版進(jìn)行數(shù)據(jù)庫(kù)安全方面的優(yōu)化。
mysql> select host,user,password from user;
+-----------------------+-----------+-------------------------------------------+
| host | user | password |
+-----------------------+-----------+-------------------------------------------+
| localhost | root | |
| localhost.localdomain | root | |
| 127.0.0.1 | root | |
| localhost | | |
| localhost.localdomain | | |
| localhost | cactiuser | *43DD7940383044FBDE5B177730FAD3405BC6DAD7 |
| % | cactiuser | *43DD7940383044FBDE5B177730FAD3405BC6DAD7 |
| % | cacti | *9CDE1A09ED38FCFD4696D1AA82E4E1EE2F26270D |
+-----------------------+-----------+-------------------------------------------+
8 rows in set (0.00 sec)
mysql> select host,db,user from db;
+-----------+---------+-----------+
| host | db | user |
+-----------+---------+-----------+
| % | cacti | cacti |
| % | cacti | cactiuser |
| % | test | |
| % | test\_% | |
| localhost | cacti | cactiuser |
+-----------+---------+-----------+
通過(guò)以上圖,我要解決兩個(gè)問(wèn)題:
1.默認(rèn)登錄數(shù)據(jù)庫(kù),不需要密碼,看到上述表得知,原因是root用戶沒(méi)有設(shè)置密碼;
2.Cacti程序連接數(shù)據(jù)庫(kù)對(duì)用的是cactiuser用戶賬號(hào),在這里做出修改,提升數(shù)據(jù)庫(kù)安全性。
mysql> update user set password=password("****") where user="root"; #更改root用戶密碼
Query OK, 3 rows affected (0.00 sec)
Rows matched: 3 Changed: 3 Warnings: 0
mysql>select host,user,password from user;
+
| host | user | password |
+-----------------------+-----------+-------------------------------------------+
| localhost | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| localhost.localdomain | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| 127.0.0.1 | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
mysql> flush privileges;
mysql> exit
[root@Cacti /]# mysql -uroot -p #必須輸入密碼才能登錄數(shù)據(jù)庫(kù)
Enter password:
mysql> use mysql;
mysql> update user set password=password("***") where host="%" and user="cactiuser";Query OK, 1 row affected (0.00 sec)Rows matched: 1 Changed: 1 Warnings: 0
#請(qǐng)注意該host="%" 修改密碼后,并不影響程序連接數(shù)據(jù)庫(kù);
mysql> update user set password=password("***") where host="localhost" and user="cactiuser";
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0
mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)
#請(qǐng)注意,cacti程序的host主機(jī)是localhost,對(duì)用此項(xiàng)修改密碼才有效果;
mysql> select host,user,password from user;
+-----------------------+-----------+-------------------------------------------+
| host | user | password |
+-----------------------+-----------+-------------------------------------------+
| localhost | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| localhost.localdomain | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| 127.0.0.1 | root | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| localhost | | |
| localhost.localdomain | | |
| localhost | cactiuser | *1F20AD266C1753F805F6A4A6CDF34C72153C86FB |
| % | cactiuser | *43DD7940383044FBDE5B177730FAD3405BC6DAD7 |
| % | cacti | *9CDE1A09ED38FCFD4696D1AA82E4E1EE2F26270D |
數(shù)據(jù)庫(kù)中修改了用戶的密碼,所以程序配置文件也要修改對(duì)應(yīng)的賬號(hào)。
# vi /var/www/html/include/config.php
$database_type = "mysql";
$database_default = "數(shù)據(jù)庫(kù)名";
$database_hostname = "localhost";
$database_username = "用戶名";
$database_password ="密碼";
$database_port = "3306";
到此步為止,所有配置成功。
一個(gè)建議,root用戶用于整個(gè)數(shù)據(jù)庫(kù)系統(tǒng)管理,業(yè)務(wù)系統(tǒng)另建賬戶。
免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如果涉及侵權(quán)請(qǐng)聯(lián)系站長(zhǎng)郵箱:is@yisu.com進(jìn)行舉報(bào),并提供相關(guān)證據(jù),一經(jīng)查實(shí),將立刻刪除涉嫌侵權(quán)內(nèi)容。