Hello,

I have mysql & phpmyadmin installed on my raq, I use phpmyadmin to create customers database, username & pass.

I then tell customers to install phpmyadmin on their space if they want to access mysql.

I have a problem, the customers are able to view & modify other users databases.

Please help, and I setting the permissions wrong when I setup the customers?

Thanks in advance.

Steve

from phpwizard.net

"I'm an ISP. Can I setup one central copy of phpMyAdmin or do I need to install it for each customer?
Since version 2.0.3, you can setup a central copy of phpMyAdmin for all your users. The development of this feature was kindly sponsored by NetCologne GmbH. This requires a properly setup MySQL user management and phpMyAdmin advanced authentication. See the install section on "Using advanced authentication"

Very easy to do.

Also it seems that you really should read on mysql.com about securing your MySQL installation too. Even in this mode you users should be able to view but not modify, you are definitely not setting up your users correctly. There are some good articles on devshed.com as well.

Ok, my customers are installing & running phpmyadmin. I have set their mysql permissions to the following;
select, insert, update, delete, create, drop, process, file, references, index, alter

Is this correct, and will this protect my other customers databases?

Hi!
Two points.
1) phpmyadmin allows the advanced authentication system. This would let the users see only their databases.

2) Users must not be given permissions to delete and create databases.(or a limit must be put on it.) Otherwise they all are equivalent to administrators. In this case even the phpmyadmin authentication cannot help. ..... ;)

Have a great day .... :)