[DiscordArchive] special symbols, spaces, Unicode ?
[DiscordArchive] special symbols, spaces, Unicode ?
Archived author: Ryan Turner • Posted: 2025-09-30T09:56:55.167000+00:00
Original source
Only the server needs to access mysql, which doesnt need external access, only in your case for your website if it's not hosted locally, but even then, use the website's IP only, do not ever open to all the world (the port) and allow any IP in the wolrd accessing
Archived author: Mithria • Posted: 2025-09-30T09:57:10.660000+00:00
Original source
if you want to layer it futher,. you can set access through your firewall on the mysql port only to the specific ip as well
Archived author: Durotan • Posted: 2025-09-30T09:57:34.658000+00:00
Original source
Thank you guys
Archived author: Mithria • Posted: 2025-09-30T09:59:06.973000+00:00
Original source
basic takeaway: opening the mysql port is extremely dangerous, and you should take every possible measure to ensure only the intended people can access it. A firewall whitelist for that port, plus the mysql accounts restricted to specific ip, plus the root mysql account being localhost only, plus very strong passwords on all of them
Archived author: Mithria • Posted: 2025-09-30T09:59:53.717000+00:00
Original source
even without a specific hacker, there are literally bots that scan for open mysql ports with insecure access so they can ransomware it
Archived author: Revision • Posted: 2025-09-30T10:00:33.469000+00:00
Original source
You could also use a VPN of some description to access MySQL. I mean like Radmin
Archived author: Revision • Posted: 2025-09-30T10:00:47.390000+00:00
Original source
And then just not open the MySQL port to the public
Archived author: Mithria • Posted: 2025-09-30T10:01:02.118000+00:00
Original source
yeah that would be preferable
Archived author: Mithria • Posted: 2025-09-30T10:03:21.086000+00:00
Original source
also if using a firewall whitelist for the port it might be extra cautious to set up a firewall rule that ensures the incoming request from a specific ip is also being sent back to that ip to prevent any kind of ip spoofing. although i doubt that would happen over tcp
Archived author: Durotan • Posted: 2025-09-30T10:09:45.813000+00:00
Original source
great i do that