default databases pre-installed in phpmyadmin? [SOLVED]

Problems with the Windows version of XAMPP, questions, comments, and anything related.

default databases pre-installed in phpmyadmin? [SOLVED]

Postby its me » 15. October 2011 18:15

hello guys,
today i have short questions about renaming the default databases came preinstalled in xampp 1.7.7 (i'm using windows server 2008 R2 and working fine)
I need badly to secure and arrange those databases under user issue
something like: username_databasename
e.g. databases:
mike_mailform
mike_requestform and user will be e.g. "mike" for both databases
e.g. databases:
sirg_dbmain
sirg_dbsecondory and user for both will be e.g. "sirg"

then as you know, they will be sorted in phpmyadmin like mike - then the databases underneath...
I hope you understood the point/scenario i want to reach

so, now?
in xampp comes in default databases such as col, test, information_schema, webdav... and others...
1- how i can know each one is for what? where to find this list?
2- if i want to rename them from "operation" tab in each one's interface, what will happen?
3- there is databases called "phpmyadmin" is it rename-able???
4- what about the users in "privileges" tab? i see more than one "root" and without password! how we can create 2 users with the same spelling?
5- why without password (written "NO") in red, under password column....? isn't security issue?
5- what is the different if i change the host to "any" and "localhost" for each user?
6- i need to keep only one root user, and delete the other root users, what will happen and which one to keep?


Thanks in advanced for providing answers guys, I'm loving xampp each day :)

Mike
its me
 
Posts: 61
Joined: 03. October 2011 09:45
Operating System: Windows server 2008 SP1 R2

Re: default databases pre-installed in phpmyadmin??

Postby Altrea » 15. October 2011 19:10

Hi its me,

Well, i don't think renaming the default Databases is a great idea. But it is your Environment you can do what you want.

its me wrote:I need badly to secure and arrange those databases under user issue

How do you think the databases are secure then? To secure MySQL Databases, create own users for each applications you want to use. Create own users for each user which should be able to administrate the database.
You can set permissions for each user, so each user can just see the databases you want to see him.

its me wrote:in xampp comes in default databases such as col, test, information_schema, webdav... and others...
1- how i can know each one is for what? where to find this list?
2- if i want to rename them from "operation" tab in each one's interface, what will happen?
3- there is databases called "phpmyadmin" is it rename-able???

- mysql, information_schema and performance_schema are important MySQL-Databases. I don't think they are renamable without crashing MySQL. If you want to rename them, you can try to Google this, because this is exactly what i have to do to find it out for you :shock:
- test is a mysql Database too, but not needed. Rename or delete it if you don't need it.
- phpmyadmin is the default database for phpmyadmin settings. This Database is renamable. You can find a variable in the phpmyadmin configuration file config.inc.php for this.
- cdcol is the database for the CD Collection Example in the XAMPP Administration Page. You can rename or delete that database, if you don't need that example application.
- webauth: i don't know. If i remember that was a database for an database auth example in prior XAMPP versions. I can't find any reference in the XAMPP 1.7.7 sources.

its me wrote:4- what about the users in "privileges" tab? i see more than one "root" and without password! how we can create 2 users with the same spelling?

They are not in every cases the same, they have different HOST settings. HOST defines the computer the user or script tries to login from. localhost and 127.0.0.1 are in most cases the same (localhost is mapped to 127.0.0.1), but if you have changed your Windows HOSTS file or use IPv6 localhost can be something different. Thats why the root user does have both entries.
All users that login with phpmyadmin just need the localhost or 127.0.0.1 HOST, because phpmyadmin is a webapplication which runs from the same computer then the MySQL-Database. The same with all php applications you run in XAMPP.
Other hosts like Computernames or IP-Adresses are just needable if the users have scripts or administrative tools (like MySQL Workbench) on their own computers which they want to use on this database.

its me wrote:5- why without password (written "NO") in red, under password column....? isn't security issue?

Leaving root without password can be a big security issue. If someone has access to your server or your phpmyadmin, your Database is full administratable for him. He can delete, rename, add everything in there.

its me wrote:5- what is the different if i change the host to "any" and "localhost" for each user?

any means "any Host exept localhost", because localhost has a default anonymous user which would match before any host.

its me wrote:6- i need to keep only one root user, and delete the other root users, what will happen and which one to keep?

Why? Leave it as it is. The consequences can be big and the benefit is really small.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Re: default databases pre-installed in phpmyadmin??

Postby its me » 15. October 2011 20:44

truly appreciated your time dear Altrea,
so, as far i understand, i should remain phpmyadmin, mysql, performance_schema, information_schema as without renaming, just leave them like this...
1- all others are not a problem if i go ahead and rename them, or delete them right?
2- about users, i want to keep one "root" user which i added a password for it... all other which they are "root" but without password i want to remove, is it ok?
3- i am having really bad time in how to setup the .htaccess thing and username and password with groups... these days this is my only headache, this is much headache for me in windows, as i learned to use the htaccess editor in normal linux web hostings on the internet, so i see it difficult.... as your own personal respected experience, what you advice me and where should i start from? what is the starting point that will be much better than others?? I really appreciate Sharely's time and the response fore me in the other post, he/she gave me a lot of useful inforamtion which i am trying to pass through them but up to now i still see it difficult and i want to try my best before going back to that post and ask sharley again.... what you think? is there another way u prefere? or give it to me in an easier way to understand it?

appreciating your support and time, along with sharely and guys...

Mike
its me
 
Posts: 61
Joined: 03. October 2011 09:45
Operating System: Windows server 2008 SP1 R2

Re: default databases pre-installed in phpmyadmin??

Postby Altrea » 15. October 2011 21:10

its me wrote:truly appreciated your time dear Altrea,

You're welcome :D

its me wrote:so, as far i understand, i should remain phpmyadmin, mysql, performance_schema, information_schema as without renaming, just leave them like this...

You can rename the phpmyadmin database if you want to. Phpmyadmin is just a webapplication. You can define the database it should use. But, i don't see a good reason for renaming any of this default databases, yes.

its me wrote:1- all others are not a problem if i go ahead and rename them, or delete them right?

Just try it out. But please please please make a backup before you rename or delete any databases.

its me wrote:2- about users, i want to keep one "root" user which i added a password for it... all other which they are "root" but without password i want to remove, is it ok?

Don't ask me. I don't know your system. What if localhost is setted to any other IP then 127.0.0.1 and you have deleted this root entry? Then you don't have any administrative account to the databases.
What if you want to access phpmyadmin with http://127.0.0.1/phpmyadmin/ but have deleted this host entry for root? Then you don't have any administrative account to the databases. So why don't you leave them as they are and just give them both the same password?

its me wrote:3- i am having really bad time in how to setup the .htaccess thing...

Thats a completly new topic. Please open a new thread for that, because it will make searching and referencing much easier.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Re: default databases pre-installed in phpmyadmin??

Postby its me » 15. October 2011 21:19

ok let see, about the backup, how i can backup all of them so i can restore them if something happen after the renaming?! i don't see reasonable backup solution
- about the root issue, i wonder also, i am speaking about the default what comes with xampp by default, there is more than one root user, i already configured one root and put a psssword for it, other "root" users have no passwords, thats why i want to delete them! they just came predefined in xampp, this is all about, that's why i am asking about what is not needed to be kept from the default predefined stuff so i will delete them, others what is needed i will keep them even without renaming...
- i understand it is a new topic, i though u would remember this one viewtopic.php?f=16&t=48590 but whatever, just let me try more and will let you know in that topic, or i might crate a new topic only for this....
thanks again dear, if you had time to look at the preinstalled things in xampp then please let me konw about those stuff above
appreciated ur efforts :)
Mike
its me
 
Posts: 61
Joined: 03. October 2011 09:45
Operating System: Windows server 2008 SP1 R2

Re: default databases pre-installed in phpmyadmin??

Postby Altrea » 15. October 2011 21:32

its me wrote:ok let see, about the backup, how i can backup all of them so i can restore them if something happen after the renaming?! i don't see reasonable backup solution

There are several ways to do so.
- copy the database folders in your \xampp\mysql\data\ folder to a save place
- use the phpmyadmin export function with the options structure and data
- use the mysql command line interface tool mysqldump
- use other administration tools like the mysqldumper
it's up to you which one you like most.

its me wrote:- about the root issue, i wonder also, i am speaking about the default what comes with xampp by default, there is more than one root user, i already configured one root and put a psssword for it, other "root"

By default there comes two root users with XAMPP, one for host localhost and one for host 127.0.0.1.
Other Default users which comes with XAMPP are pma which is needed for some phpmyadmin functions, and two anonymous users any for host localhost and host any.
Everything else i have already said. Delete what you want to. It's your system. I don't know if you have configured your own root user the right way so that nothing crashes.

its me wrote:- i understand it is a new topic, i though u would remember this one viewtopic.php?f=16&t=48590 but whatever, just let me try more and will let you know in that topic, or i might crate a new topic only for this....

The other topic doesn't have any speaking topic too. Please just put things into a topic that are related to each other (e.g. questions about htaccess password protection) and give them a speaking headline so that others you are searching for htaccess password protection too can find your topic easily.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Re: default databases pre-installed in phpmyadmin??

Postby JonB » 15. October 2011 22:29

@ itsme -

What you really need is a book or 'real tutorial' (not a three or four screen web special) about MySQL.

I also need to advice you that learning takes time. :wink:


Good Luck
8)
User avatar
JonB
AF Moderator
 
Posts: 3210
Joined: 12. April 2010 16:41
Location: Land of the Blazing Sun
Operating System: Windows XP/7 - Fedora 15 1.7.7

Re: default databases pre-installed in phpmyadmin??

Postby Sharley » 15. October 2011 23:46

JonB wrote:What you really need is a book or 'real tutorial' (not a three or four screen web special) about MySQL.
Perhaps suggesting a book or 'real tutorial' may be more helpful. :wink:
User avatar
Sharley
AF Moderator
 
Posts: 3316
Joined: 03. October 2008 05:10
Location: Yeppoon, Australia Time Zone: GMT/UTC+10
Operating System: Win 7 Pro 32bit/XP Pro SP3

Re: default databases pre-installed in phpmyadmin??

Postby its me » 16. October 2011 08:32

thanks for the advises guys
i will do so, thanks Altrea, thanks dear JonB and thanks a lot Sharley, i will be around :)

one more small questions as it is somehow urgent, now i delete all users and kept only 2 roots and added for them password

but pma user doesn't have password and i can't change it or add it! it keep says: password is empty!
its me
 
Posts: 61
Joined: 03. October 2011 09:45
Operating System: Windows server 2008 SP1 R2

Re: default databases pre-installed in phpmyadmin??

Postby Sharley » 16. October 2011 08:53

pma does not require a password and may not work if you provide one.

pma is a very limited user which is usually used for internal phpMyAdmin system actions that are nothing to do with a normal user or even root user access and operation of PMA.

Click on Privileges>pma click on Edit privileges>under Database specific privileges click on Edit privileges and you will see the very limited privileges that pma has and so does not require a password.
User avatar
Sharley
AF Moderator
 
Posts: 3316
Joined: 03. October 2008 05:10
Location: Yeppoon, Australia Time Zone: GMT/UTC+10
Operating System: Win 7 Pro 32bit/XP Pro SP3

Re: default databases pre-installed in phpmyadmin??

Postby its me » 16. October 2011 11:46

ok dear, i noticed that, so i will leave it without password, i hope it will not be security risk later.... to be honest, i didn't notice this user in my older servers setup, mybe it was there.... thanks a lot anyway, appreciated your great support

Mike
its me
 
Posts: 61
Joined: 03. October 2011 09:45
Operating System: Windows server 2008 SP1 R2

Re: default databases pre-installed in phpmyadmin??

Postby Sharley » 16. October 2011 12:13

Your welcome Mike and yes pma would have been in your older version server, just sitting there quietly minding it's own business working unobtrusively in the background. :D

If you feel there may be a security issue then you can set a password for pma but if phpMyAdmin won't work after setting a password then you may know the reason.

I do hope you can move forward now and enjoy your XAMPP and all it has to offer.

Best wishes. :)
User avatar
Sharley
AF Moderator
 
Posts: 3316
Joined: 03. October 2008 05:10
Location: Yeppoon, Australia Time Zone: GMT/UTC+10
Operating System: Win 7 Pro 32bit/XP Pro SP3

Re: default databases pre-installed in phpmyadmin??

Postby Altrea » 16. October 2011 12:19

its me wrote:ok dear, i noticed that, so i will leave it without password, i hope it will not be security risk later....

The pma control user does have SELECT permissions on some mysql tables, but security relevant columns like the password hash is expluded. But this user does have SELECT, INSERT, UPDATE, and DELETE permissions on the phpmyadmin database. Someone who uses this user can crash your phpmyadmin by deleting the database.
You can give that user a password too, but you have to tell the password your phpmyadmin config page too.

its me wrote:to be honest, i didn't notice this user in my older servers setup, mybe it was there....

It is in all XAMPP installations since... i don't know... ever. In every release which comes with phpmyadmin. I have told you about that user in a earlier post. I hope you read my posts :shock:
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Re: default databases pre-installed in phpmyadmin??

Postby Sharley » 16. October 2011 13:29

Altrea wrote:...but you have to tell the password your phpmyadmin config page too.
Mike, adding plain text passwords in configuration files is a big security risk and totally unnecessary and should be avoided.

Individual database user/pass combinations are stored encrypted when you create a New user in phpMyAdmin.

The user root password and the user/password combo for securing your XAMPP should only be set in the Security menu mentioned above so they are all encrypted and stored in the correct databases and the correct folder and files in the XAMPP security folder - this will also prevent any issues with the user/pass combination when you login.
User avatar
Sharley
AF Moderator
 
Posts: 3316
Joined: 03. October 2008 05:10
Location: Yeppoon, Australia Time Zone: GMT/UTC+10
Operating System: Win 7 Pro 32bit/XP Pro SP3

Re: default databases pre-installed in phpmyadmin??

Postby Altrea » 16. October 2011 13:38

Sharley, we are talking about two different point.

I am with you to say, NEVER save the root password in the phpmyadmin password file.
But this is the pma password. You can't set this in the security. There was a possibility for this in earlier versions of XAMPP but this also stored the pma password in the phpmyadmin config file (sure it was random generated and a long one).

I think it is quite safer to have a pma password saved in the config file then leave the password blank.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Next

Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 127 guests