Unless a senor dev contradicts me, I would like to see the privileges granting modified in the 2 tutorials that explain how to setup a server.
Granting all privileges on *.* is almost like creating a new root acount.
It's giving rights to the eqemu user on all the DBs of your server. This may allow him to create new mysql accounts, flush privileges, drop some databases, create new ones...
We certainly don't need this. It may be inoffensive on private lan servers, but a terrible breach on public servers where almost stranger are given rights on the database.
Please correct this by according the rights only on the eqemu database. Mysql documentations and the post i made on howto install a linux server contain this. (basically, create the eq db first, then give rights on it after).
|