mysql 用户多主机名,具有空主机名的MySQL用户

在MySQL 5.6服务器上,mysql.user表包含一个空主机名(‘jdoe’@”)的用户.那是什么意思？

解决方法:

名称为joe的用户可以从任何主机连接.

请注意0​​7000

在第498段第9段的要点中说：

On Unix, MySQL comes with a mysql_secure_installation script that can

perform several helpful security-related operations on your

installation. The script has the following capabilities:

Set a password for the root accounts

Remove any remotely accessible root accounts.

Remove the anonymous user accounts. This improves security because

it prevents the possibility of anyone connecting to the MySQL server

as root from a remote host. The results is that anyone who wants to

connect as root must first be able to log in on the server host, which

provides an additional barrier against attack.

Remove the test database (If you remove the anonymous accounts, you

might also want to remove the test database to which they have

access).

该用户需要立即删除.

简单地跑

DELETE FROM mysql.user WHERE host='';

FLUSH PRIVILEGES;

试试看 ！！！

更新2017-02-01 17:07 EST

A ‘%’ or blank Host value means “any host.”

这适用于所有级别的拨款.

标签：mysql-5-6,mysql,permissions

来源： https://codeday.me/bug/20190806/1596491.html