﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>BlogJava-&lt;b&gt;成都心情&lt;/b&gt;-随笔分类-数据库</title><link>http://www.blogjava.net/rosen/category/2682.html</link><description>本 Blog 是从：http://blog.csdn.net/rosen 搬来。&lt;br/&gt;</description><language>zh-cn</language><lastBuildDate>Mon, 03 Dec 2007 09:16:31 GMT</lastBuildDate><pubDate>Mon, 03 Dec 2007 09:16:31 GMT</pubDate><ttl>60</ttl><item><title>Proxool 0.9.0RC1  发布</title><link>http://www.blogjava.net/rosen/archive/2006/03/23/37093.html</link><dc:creator>Rosen</dc:creator><author>Rosen</author><pubDate>Thu, 23 Mar 2006 13:58:00 GMT</pubDate><guid>http://www.blogjava.net/rosen/archive/2006/03/23/37093.html</guid><wfw:comment>http://www.blogjava.net/rosen/comments/37093.html</wfw:comment><comments>http://www.blogjava.net/rosen/archive/2006/03/23/37093.html#Feedback</comments><slash:comments>8</slash:comments><wfw:commentRss>http://www.blogjava.net/rosen/comments/commentRss/37093.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/rosen/services/trackbacks/37093.html</trackback:ping><description><![CDATA[    Proxool 是大家公认为性能较好的连接池，以至于除了 DBCP，我只推荐它了，至于 C3P0，根据我的已有经验，性能表现不佳。Proxool 更新的速度可谓缓慢，不过丝毫不影响它的口碑。一个成熟的产品是经的起时间考验的！好不容易月初发布了 0.9，下面是主页新闻：<br /><br />    从 2003 年 12 月 14 日到 2006 年 3 月 2 日 0.9.0RC1 发布，间隔了 810 天的时间，太长了。在 2004 年我们投入了大量的工作，并一直持续到 2005 年。不幸的是，总有一些事情把我们给耽搁，以致本次发布延期。感谢大家继续使用 Proxool 并把信息告诉我们。本次发布没有已知错误，但是你应该记住它是一个供参考的发布。最新的稳定版本仍然是 0.8.3。详细资料请看<a class="" title="" href="http://proxool.sourceforge.net/changelog.html" target="_blank">changelog</a>。<br /><br />网上有一大堆关于 Proxool 配置的文章，各位有兴趣 google 一下吧。<img src ="http://www.blogjava.net/rosen/aggbug/37093.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/rosen/" target="_blank">Rosen</a> 2006-03-23 21:58 <a href="http://www.blogjava.net/rosen/archive/2006/03/23/37093.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>MySql 用户安全</title><link>http://www.blogjava.net/rosen/archive/2005/08/11/9851.html</link><dc:creator>Rosen</dc:creator><author>Rosen</author><pubDate>Thu, 11 Aug 2005 15:25:00 GMT</pubDate><guid>http://www.blogjava.net/rosen/archive/2005/08/11/9851.html</guid><wfw:comment>http://www.blogjava.net/rosen/comments/9851.html</wfw:comment><comments>http://www.blogjava.net/rosen/archive/2005/08/11/9851.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.blogjava.net/rosen/comments/commentRss/9851.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/rosen/services/trackbacks/9851.html</trackback:ping><description><![CDATA[<P align=left><SPAN id=ArticleContent1_ArticleContent1_lblContent><FONT size=2>&nbsp; &nbsp;Windows默认安装好MySql以后需要做一些安全措施。首先像这样：<BR>&nbsp;&nbsp;&nbsp; mysql&gt; use mysql; <BR>&nbsp;&nbsp;&nbsp; Database changed <BR>&nbsp;&nbsp;&nbsp; mysql&gt; select Host,User,Password,Select_priv,Grant_priv from user; <BR>&nbsp;&nbsp;&nbsp; +------+------+-----------+-------------+------------+ <BR>&nbsp;&nbsp;&nbsp; | Host | User | Password&nbsp; | Select_priv | Grant_priv | <BR>&nbsp;&nbsp;&nbsp; +------+-------+----------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; | localhost | root |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | <BR>&nbsp;&nbsp;&nbsp; |&nbsp; buider&nbsp;&nbsp; | root |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | <BR>　　| localhost |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | <BR>　　|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | N&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | N&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | <BR>　　+-------+---+------+------+-------------+------------+ <BR>&nbsp;&nbsp;&nbsp; 4 rows in set (0.00 sec) </FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 默认情况下，可以不要任何用户、口令登陆MySql；来自localhost的root用户是没有口令的，一旦有人伪装成来自buider的root用户，安全性就会受到挑战。</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 接着需要删除多余的用户：<BR>&nbsp;&nbsp;&nbsp; mysql&gt; delete from user where user=''; <BR>&nbsp;&nbsp;&nbsp; mysql&gt; delete from user where host='buider'; </FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 默认root用户的空密码也是必须修改：<BR>&nbsp;&nbsp;&nbsp; mysql&gt; update user set password=password('123456') where user='root';<BR>&nbsp;&nbsp;&nbsp; mysql&gt; flush privileges; </FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 这样，MySQL数据库root用户的口令被改成123456了。其中最后一句命令flush privileges的意思是强制刷新内存授权表，否则用的还是缓冲中的口令，这时非法用户还可以用root用户及空口令登陆，直到重启MySQL服务器。</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 再来看看：<BR>&nbsp;&nbsp;&nbsp; mysql&gt; select Host,User,Password,Select_priv,Grant_priv from user;&nbsp;&nbsp;&nbsp; <BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; | Host&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | User&nbsp;&nbsp;&nbsp; | Password&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Select_priv | Grant_priv |<BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; | localhost | root&nbsp;&nbsp;&nbsp; | 565491d704013245 | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |<BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+ <BR>&nbsp;&nbsp;&nbsp; 1 rows in set (0.03 sec)</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 利用root用户登陆是不明智的，因为它拥有太大的权限，在实际使用时应该会出现安全问题，应该再建立一个用户，让他只要select、insert、update、delete这些基本权限即可。<BR>&nbsp;&nbsp;&nbsp; 像这样建立一个叫javapro的用户密码为123456，它只能来自localhost并操作process下面所有的表：<BR>&nbsp;&nbsp;&nbsp; mysql&gt; grant select,insert,update,delete on process.* to </FONT><A href="mailto:javapro@localhost"><FONT size=2>javapro@localhost</FONT></A><FONT size=2> identified by "123456";<BR>&nbsp;&nbsp;&nbsp; Query OK, 0 rows affected (0.00 sec)</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 让我们再来检查一下：<BR>&nbsp;&nbsp;&nbsp; mysql&gt;&nbsp; select Host,User,Password,Select_priv,Grant_priv from user;&nbsp;&nbsp;&nbsp; <BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; | Host&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | User&nbsp;&nbsp;&nbsp; | Password&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Select_priv | Grant_priv |<BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; | localhost | root&nbsp;&nbsp;&nbsp; | 565491d704013245 | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |<BR>&nbsp;&nbsp;&nbsp; | localhost | javapro | 565491d704013245 | Y&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | N&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |<BR>&nbsp;&nbsp;&nbsp; +-----------+---------+------------------+-------------+------------+<BR>&nbsp;&nbsp;&nbsp; 2 rows in set (0.00 sec)</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 好，在程序中，我们只需要用javapro用户对我们的工作表process进行基本操作就行了。</FONT></P>
<P align=left><FONT size=2>&nbsp;&nbsp;&nbsp; 另外注意一下数据库备份的问题，mysqldump -u root -p mysql&gt;samp.db.txt，在DOS命令台（不是mysql）下运行之，可以在bin目录下生成mysql数据库下所有的表文件（samp.db.txt）。导入最好使用EMS MySql Manager。<BR><BR>&nbsp; <BR><FONT color=#ff0000><STRONG>请注意！引用、转贴本文应注明原作者：Rosen Jiang 以及出处：</STRONG></FONT><A href="http://www.blogjava.net/rosen"><FONT color=#ff0000><STRONG>http://www.blogjava.net/rosen</STRONG></FONT></A></FONT></P></SPAN><img src ="http://www.blogjava.net/rosen/aggbug/9851.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/rosen/" target="_blank">Rosen</a> 2005-08-11 23:25 <a href="http://www.blogjava.net/rosen/archive/2005/08/11/9851.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>