View Single Post
  #1  
Old 28th August 2012, 12:05
radim_h radim_h is offline
Senior Member
 
Join Date: Jan 2007
Location: Prague, Czech
Posts: 420
Thanks: 33
Thanked 24 Times in 19 Posts
Send a message via ICQ to radim_h
Default howto - disable default remote access to sql, enable webserver access automatically

Maybe someone can use this
.
I have multiserver setup, where Database server is different then webserver
server1: ISPConfig webinterface, DNS, oldwebserver
server2: mailserver, dbserver

When you add Database in Sites=> Database menu, there is Remote Access IPs field (separate by , and leave blank for any)

I don't like that access to mysql server is enabled by default from anywhere. Want to explicitly allow all accessing IPs . And i also need webserver to have allowed access to DB by default (my clients will never know what to fill into that field)

It's easy:
On Database server edit file
/usr/local/ispconfig/server/plugins-available/mysql_clientdb_plugin.inc.php

and change
//if(trim($host_list) == "") $host_list = '%';
to
if(trim($host_list) == "") $host_list = '1.2.3.4';

and also change
//if(!is_array($host_list)) $host_list = explode(',', $host_list);
to
if(!is_array($host_list)) {$host_list = split(',', $host_list); $host_list[] = '1.2.3.4';}

where 1.2.3.4 is adress of your webserver (or any server you want to allow acces to by default)

You can check result in Privileges table in phpMyAdmin

Last edited by radim_h; 28th August 2012 at 12:10.
Reply With Quote
Sponsored Links