drop user 'root'@'%';
drop user ''@'%';
show grants for root;  
delete from mysql.user where user = '';
grant all privileges *.* to 'root'@'140.138.14.%' with grant option;
revoke all on *.* from 'www'@'192.168.1.%';
revoke all on xa_bbs_dz_72_20110515.* from 'www'@'192.168.1.%';