D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] drupal and mysql

 

Rob Beard wrote:
>
>> Access denied for user 'steppicouk230_1'@'superultra28.uk2.net' (using
>> password: YES)
>>
> I'd say it's more of a password problem with the user trying to connect
> to the MySQL database.

Yes it is the error show from the PHP mysql_connect function (and
possibly other languages).

If it is PHP, suggests that the PHP settings aren't paranoid enough. As
I suspect they have display errors set to 1 which is recommended against
on servers facing the internet, as it leaks information like database
username, and database server name, and whether password authentication
is in use.

Of course disabling it means you have to give external PHP users some
other secured access to the error log, but that is useful to do anyway.

http://www.php.net/manual/en/errorfunc.configuration.php#ini.display-errors

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html