Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
I want to provide more security here.
What is the recommended process for changing the root password for the mysql db?
Can I simply use an ALTER from the mysql cli ?
Like: ALTER USER 'root'@'localhost' IDENTIFIED BY 'PASSWORD_HERE';)
Also, does the password need to be stored in plain text in the parameters.php file used by Projeqtor and the config.inc.php file used by phpmyadmin ?
Changing root password is not a subjet linked to projeqtor.
You do as you want.
Yes, password needd to be stored in plain text in the parameters.php.
It could be encrypted, but decryption method will be stored in projeqtor code, which is opensource, so will be very easy to read for any hacker.
Best solution is to move parameters.php out of web reach to limit hacking possibilities and secure access to your server.
Note that config.inc.php is part of phpMyAdmin, that has nothing to do with projeqtor, but faced same problem and found same solution (except that it does not propose to move config.inc.php out of web reach).
Is there a recommended way to go about encrypting it ?
Do you have a decryption method we can use ?
Any examples available?
Where would the decryption method live?
On the Projeqtor side, you mention relocating the paramaters.php file as the best way.
Can you elaborate a bit more on this, maybe provide an example
Thanks again.
Hello,
Please have a look at my answer here : https://www.projeqtor.org/en/forum/5-ask-questions/13038-unable-to-access-mysql-db-after-changing-root-password-with-phpmyadmin#35676
You won't be able to encrypte DB password as a plugin.
You'll have to change core code, so your changes will be lost each time you migrate to new community version
Ok. Understood.