生活随笔
收集整理的這篇文章主要介紹了
MySQL空密码用户清理
小編覺得挺不錯的,現(xiàn)在分享給大家,幫大家做個參考.
2019獨(dú)角獸企業(yè)重金招聘Python工程師標(biāo)準(zhǔn)>>>
假設(shè)你想管理下用戶,只記得某個庫里的某個表管理用戶的登錄,你需要這么做:
- 前提是有足夠權(quán)限的賬戶,沒有就skip刷root密碼吧
[root@ax-01 ~]# mysql -uroot -p
Enter password:mysql> show databases; //查所有庫的名字
+--------------------+
| Database |
+--------------------+
| information_schema |
| cmsdb |
| discuz |
| mysql | //你看到mysql庫,想起來就這個庫里,但是不知道該查那一個表
| performance_schema |
| test |
| wpdb |
+--------------------+mysql> use mysql; //選擇mysql庫
mysql> show tables; //查mysql里面的所有表
| time_zone_name |
| time_zone_transition |
| time_zone_transition_type |
| user | //你看到user表,想起來應(yīng)該在這里,但是不知道查那個字段
+---------------------------+mysql> desc user; //查看所有user下的字段名(表頭)
+------------------------+-----------------------------------+------+-----+-----------------------+-------+
| Field | Type | Null | Key | Default | Extra |
+------------------------+-----------------------------------+------+-----+-----------------------+-------+
| Host | char(60) | NO | PRI | | |
| User | char(16) | NO | PRI | | |
| Password | char(41) | NO | | | |
看到這里你感覺需要了解user,host,password這三個字段,因?yàn)榈顷懙臅r候要用到mysql> select user,host,password from mysql.user; //查看這三個字段的內(nèi)容
+------------+-----------+-------------------------------------------+
| user | host | password |
+------------+-----------+-------------------------------------------+
| root | localhost | *8E1A3402D66F8DDD8D9D19596B706C6D238C0F34 |
| root | ax-01 | |
| root | 127.0.0.1 | |
| root | ::1 | |
| | localhost | |
| | ax-01 | |
| wpuser | 127.0.0.1 | *E4D18EEE7AEB0071BDB1D931CD44AA9AE0D05293 |
| discuzuser | 127.0.0.1 | *F47A72DB156C9E3F76410F41AC68CE966ACD6BDA |
| cmsuser | 127.0.0.1 | *A9A4F564B109C6ECCF5EC6E2EB11DBD8925FEEDF |
+------------+-----------+-------------------------------------------+
看到這里,你發(fā)任意用戶(空用戶名)不需要密碼就可以登錄。顯然不行,需要刪掉。刪東西前要養(yǎng)成備份的好習(xí)慣
[root@ax-01 ~]# mysqldump -uroot -paxianglinux mysql user > /tmp/user.sqlmysql> delete from mysql.user where password=''; //刪掉
mysql> select user,host,password from mysql.user; //再看
+------------+-----------+-------------------------------------------+
| user | host | password |
+------------+-----------+-------------------------------------------+
| root | localhost | *8E1A3402D66F8DDD8D9D19596B706C6D238C0F34 |
| wpuser | 127.0.0.1 | *E4D18EEE7AEB0071BDB1D931CD44AA9AE0D05293 |
| discuzuser | 127.0.0.1 | *F47A72DB156C9E3F76410F41AC68CE966ACD6BDA |
| cmsuser | 127.0.0.1 | *A9A4F564B109C6ECCF5EC6E2EB11DBD8925FEEDF |
+------------+-----------+-------------------------------------------+
mysql> flush privileges;
mysql> quit;
轉(zhuǎn)載于:https://my.oschina.net/u/3579690/blog/1516636
總結(jié)
以上是生活随笔為你收集整理的MySQL空密码用户清理的全部內(nèi)容,希望文章能夠幫你解決所遇到的問題。
如果覺得生活随笔網(wǎng)站內(nèi)容還不錯,歡迎將生活随笔推薦給好友。