3 ms·
Which is why I don't use any database password if the database is listening on localhost only, which is the case most of the time.
by z92 11y ago
Which is why I don't use any database password if the database is listening on localhost only, which is the case most of the time.
- cubehouse 11y agoI don't think this is a good idea, even if the database is just listening to localhost. Say a malicious script gets uploaded to the machine, it will be able to dump the entire database without any need to seek out credentials.
- degenerate 11y agoAgree... it's better to still have credentials, but ALSO only listen locally. At least that way the credentials need to be found first!