<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2963" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Now, how can Drupal 4.7.3 create tabel for me if
the db username has no rights to create table? Isn't that a security
risk?</FONT></DIV>
<DIV><FONT face=Arial size=2>Or just remove the db username (with create DB
rights) after fresh installation. Simply.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=amr.mostafa@gmail.com href="mailto:amr.mostafa@gmail.com">Amr
Mostafa</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=development@drupal.org
href="mailto:development@drupal.org">development@drupal.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, October 11, 2006 3:11
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [development] Drupal 5.x
Installation is Bad!</DIV>
<DIV><BR></DIV>Technically, it's impossible for installer to create database
for you UNLESS you provide it with username and password of the superuser
(e.g. root).<BR>After installation, it stores the superuser name and password
in a config file to remember them later whenever it wants to connect to the
database. This is bad security, it leaves your superuser information out
somewhere. Due to a security bug in ANY application running under apache,
someone could be able to read your config file and steal your superuser
information. <BR><BR>Drupal strives for ease of use but without affecting
security.<BR><BR>
<DIV><SPAN class=gmail_quote>On 10/11/06, <B class=gmail_sendername>Drupal
Indonesia</B> <<A href="mailto:support@drupal-id.com">support@drupal-id.com
</A>> wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">Hi,<BR><BR>I
just try 5.x CVS version and very sad that the installation procedure can't
<BR>create the Database for me! Unlike Joomla, this is very sad.<BR>Does
core dev have plan to make it better
(easier)?<BR><BR>Regards.<BR><BR></BLOCKQUOTE></DIV><BR>
<P>
<HR>
<P></P>No virus found in this incoming message.<BR>Checked by AVG Free
Edition.<BR>Version: 7.1.408 / Virus Database: 268.13.2/471 - Release Date:
10/10/2006<BR></BLOCKQUOTE></BODY></HTML>