I've seen some website on security recommend to enable mysql.safe_mode
in php.ini
# Enable SQL safe mode
sql.safe_mode = On
When I searched hard to find info on this, I found this:
If the SQL Safe Mode option is enabled the MySQL and Ingres extensions will ignore the supplied host, user and password information and will use only the default ones.
By the sound of that, it really sounds like an unsafe mode than safe mode. Doesnt it mean, even if the application (say Joomla) supplies a mysql user with lesser previleges, enabling this will make mysql use the default root user for it? Have I misunderstood what it does? What is the benefit of enabling sql.safe_mode
in php?
on
? – Neel Oct 31 '14 at 20:25root
. If you use safe mode, you should set the default to a low-privilege user. Then if a script tries to useroot
, it will not be allowed. – Barmar Nov 4 '14 at 22:36