how can we secure connections in php/MySQL?

[samira]

hi
whether the mysql client can actually connect securely, what would need to be done to enable it to, if anything could be done, and some other suggested method of administering the database if nothing could be done.

MySQL 3.23.54
php 4.2.2
apache

thanks

[bitrain]

By default only localhost can connect to a mysql db. I don't think it is necessary to secure it and I never heard of anyone doing it, but I can be wrong. Always use a password is the best way of securing it.
You can let a mysql user grant access to only 1 database if that is what you mean.

[samira]

any host can connect to a mysql db, and default connection is unencrypted so unsecure!
with OpenSSL ,we can secure it ,but in MySQL 4.0 and newer

[kg4cbk]

Sounds like you should be able to use ssh to tunnel a connection to the box. This would provide an encrypted connection for administration plus you would not have to open up any other ports on the server other than the ssh port.

This should work with any version of mysql.