Hi, I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Unlike Joomla, this is very sad. Does core dev have plan to make it better (easier)? Regards.
Would you be so kind as to post using your real name? I would really like to know whom I'm talking to and "Drupal Indonesia" leaves some to be desired. ;-) There is an installer in the works - right now it's slightly more manual an install than Joomla. Check the archives for some good discussion. -- Jonathan Lambert Principal | FireBright, Inc. Email: j@firebright.com -------------------------------------------------- "Not everything that can be counted counts, and not everything that counts can be counted." - Albert Einstein (1879-1955) On Oct 10, 2006, at 10:46 PM, Drupal Indonesia wrote:
Hi,
I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Unlike Joomla, this is very sad. Does core dev have plan to make it better (easier)?
Regards.
Would you be so kind as to post using your real name? I would really like to know whom I'm talking to and "Drupal Indonesia" leaves some to
Jonathan Lambert
Could you please post your driver's license and social security number so that I can be assured that Jonathan Lambert is /your/ real name? -- Morbus Iff ( dare you overpower my stench of eeeevil? ) Technical: http://www.oreillynet.com/pub/au/779 Culture: http://www.disobey.com/ and http://www.gamegrene.com/ icq: 2927491 / aim: akaMorbus / yahoo: morbus_iff / jabber.org: morbus
Technically, it's impossible for installer to create database for you UNLESS you provide it with username and password of the superuser (e.g. root). After installation, it stores the superuser name and password in a config file to remember them later whenever it wants to connect to the database. This is bad security, it leaves your superuser information out somewhere. Due to a security bug in ANY application running under apache, someone could be able to read your config file and steal your superuser information. Drupal strives for ease of use but without affecting security. On 10/11/06, Drupal Indonesia <support@drupal-id.com> wrote:
Hi,
I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Unlike Joomla, this is very sad. Does core dev have plan to make it better (easier)?
Regards.
Now, how can Drupal 4.7.3 create tabel for me if the db username has no rights to create table? Isn't that a security risk? Or just remove the db username (with create DB rights) after fresh installation. Simply. ----- Original Message ----- From: Amr Mostafa To: development@drupal.org Sent: Wednesday, October 11, 2006 3:11 PM Subject: Re: [development] Drupal 5.x Installation is Bad! Technically, it's impossible for installer to create database for you UNLESS you provide it with username and password of the superuser (e.g. root). After installation, it stores the superuser name and password in a config file to remember them later whenever it wants to connect to the database. This is bad security, it leaves your superuser information out somewhere. Due to a security bug in ANY application running under apache, someone could be able to read your config file and steal your superuser information. Drupal strives for ease of use but without affecting security. On 10/11/06, Drupal Indonesia <support@drupal-id.com > wrote: Hi, I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Unlike Joomla, this is very sad. Does core dev have plan to make it better (easier)? Regards. ------------------------------------------------------------------------------ No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.408 / Virus Database: 268.13.2/471 - Release Date: 10/10/2006
Drupal Indonesia schrieb:
Now, how can Drupal 4.7.3 create tabel for me if the db username has no rights to create table? Isn't that a security risk? Quoted from INSTALL.mysql.txt: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES ON databasename.* TO 'username'@'localhost' IDENTIFIED BY 'password';
The user must have the rights to create tables. Otherwise a lot of modules can't be installed properly (without manual interaction).
Drupal 4.7.3 doesn't create tables for you. Drupal needs user/pass for a user who only has access to Drupal's own database. On other hand, superuser has access to every database on your mysql/pgsql server. It's not really hard to have an installer that does everything for you, but you will need to give it ultimate privilege which is bad security wise. Drupal tries to balance things. On 10/11/06, Drupal Indonesia <support@drupal-id.com> wrote:
Now, how can Drupal 4.7.3 create tabel for me if the db username has no rights to create table? Isn't that a security risk? Or just remove the db username (with create DB rights) after fresh installation. Simply.
----- Original Message ----- From: Amr Mostafa To: development@drupal.org Sent: Wednesday, October 11, 2006 3:11 PM Subject: Re: [development] Drupal 5.x Installation is Bad!
Technically, it's impossible for installer to create database for you UNLESS you provide it with username and password of the superuser (e.g. root). After installation, it stores the superuser name and password in a config file to remember them later whenever it wants to connect to the database. This is bad security, it leaves your superuser information out somewhere. Due to a security bug in ANY application running under apache, someone could be able to read your config file and steal your superuser information.
Drupal strives for ease of use but without affecting security.
On 10/11/06, Drupal Indonesia <support@drupal-id.com > wrote:
Hi,
I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Unlike Joomla, this is very sad. Does core dev have plan to make it better (easier)?
Regards.
________________________________
No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.408 / Virus Database: 268.13.2/471 - Release Date: 10/10/2006
----- Original Message ----- From: "Amr Mostafa" <amr.mostafa@gmail.com>
Drupal 4.7.3 doesn't create tables for you.
yes it does! Drupal 4.7.3 can automatic create tables when we install certain module, i.e: TinyMCE.
Drupal needs user/pass for a user who only has access to Drupal's own database. On other hand, superuser has access to every database on your mysql/pgsql server.
It's not really hard to have an installer that does everything for you, but you will need to give it ultimate privilege which is bad security wise. Drupal tries to balance things.
simply remove the superuser after the DB has created. isn't that easy?
It's not really hard to have an installer that does everything for you, but you will need to give it ultimate privilege which is bad security wise. Drupal tries to balance things.
simply remove the superuser after the DB has created. isn't that easy?
Yes and no. You forget that often you do not have the privileges to create a database from a PHP script but you need to do it from a control panel. This would lead to more complex documentation and more complex code. I have seen cases when I own the server and yet only my sysadmin has the MySQL su password for valid security reasons. And often, the database is there -- one account, one database. All in all, I do not see the need for database creation code. Regards NK
Drupal Indonesia schrieb:
I just try 5.x CVS version and very sad that the installation procedure can't create the Database for me! Additionally to the other answers: my ISP doesn't allow me to create databases as I like. It is down with an admin interface where even the name is created automated. So the install won't work.
participants (6)
-
Amr Mostafa -
Drupal Indonesia -
Jonathan Lambert -
Karoly Negyesi -
Morbus Iff -
Stefan Borchert