Ticket #879 (Security Issue - SQL user hostname - Remove wildcard) updated

  • [feedquote='Trac','http://trac.i-mscp.net/ticket/879#comment:9']

    or the IP-of the MySQL-Server if not "localhost"

    To my opinion the IP-of the MySQL-server is wrong.
    The i-MSCP's IP-address should be set which used to connect to SQL-server.

    For example:
    i-MSCP's external IP: 1.2.3.4
    i-MSCP's internal IP: 10.0.0.1
    SQL server IP: 10.0.0.2

    Then
    GRANT 'privileges' ON 'dbname'.* TO 'dbuser'@'10.0.0.1'
    or
    GRANT 'privileges' ON 'dbname'.* TO 'dbuser'@'10.0.0.%'
    but not
    GRANT 'privileges' ON 'dbname'.* TO 'dbuser'@'10.0.0.2'
    [/feedquote]