Forum

Changing the root p...
 
Notifications
Retirer tout

Changing the root password for mysql db to provide a more secure environment

6 Posts
3 Utilisateurs
0 Reactions
1,101 Vu
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 
[#8987]

I want to provide more security here. 

What is the recommended process for changing the root password for the mysql db?

Can I simply use an ALTER from the mysql cli ?

Like:  ALTER USER 'root'@'localhost' IDENTIFIED BY 'PASSWORD_HERE';)

Also, does the password need to be stored in plain text in the parameters.php file used by Projeqtor and the config.inc.php file used by phpmyadmin ?


 
Posté : 28/07/2023 5:11 pm
(@babynus)
Posts: 14952
Membre Admin
 

Changing root password is not a subjet linked to projeqtor.
You do as you want.

Yes, password needd to be stored in plain text in the parameters.php.
It could be encrypted, but decryption method will be stored in projeqtor code, which is opensource, so will be very easy to read for any hacker.
Best solution is to move parameters.php out of web reach to limit hacking possibilities and secure access to your server.
Note that config.inc.php is part of phpMyAdmin, that has nothing to do with projeqtor, but faced same problem and found same solution (except that it does not propose to move config.inc.php out of web reach).


 
Posté : 28/07/2023 5:17 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Is there a recommended way to go about encrypting it ?

Do you have a decryption method we can use ?

Any examples available?

Where would the decryption method live?

On the Projeqtor side, you mention relocating the paramaters.php file as the best way.
Can you elaborate a bit more on this, maybe provide an example

Thanks again.


 
Posté : 28/07/2023 5:29 pm
(@cecile)
Posts: 160
Membre Admin
(@babynus)
Posts: 14952
Membre Admin
 

You won't be able to encrypte DB password as a plugin.
You'll have to change core code, so your changes will be lost each time you migrate to new community version


 
Posté : 28/07/2023 5:40 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Ok. Understood.


 
Posté : 01/08/2023 5:37 pm
Share:
Retour en haut