SQL user permissions

[rbtux]

Can somebody explain why all the database user must have access from everywhere and not just localhost?

I mean when a customer needs the access you can manually do this for a specific user...

I doubt that this is a good idea in focus of security...

[BioALIEN]

I absolutely agree with this. Better to make it localhost by default and have a configurable switch in ispCP to toggle between localhost and an ip (with wild-card as per cPanel).

For simplicity's sake, lets just have the initial toggle between localhost and everywhere. But by default, all users created should be localhost.

[joximu]

We have a small thread in the german corner discussing this. jmeyerdo is working on a patch to make it possible for the admin to choose between actual behavour and "only localhost"...
/J

[RatS]

would be better on a per-domain base; please open a ticket!

[raphael]

not a "big deal" because at least Debian's default my.cnf makes mysqld only listen in localhost