It doesn't deal specifically with SuSE or PHP, but there is an article by Paul DuBois (author of several mySQL books) on securing mySQL. You can find it at: http://www.nusphere.com/products/library/securing_mysql_installation.pdf -Matt -----Original Message----- From: Robert Greenwell [mailto:robertgreenwell@satel.com] Sent: Thursday, March 14, 2002 10:51 AM To: suse-security@suse.com Subject: [suse-security] mySQLl on Apache web server Hi all, I have an apache web server running on SuSE 7.3 with PHP4. I would like to install mySQL on it now. I used Marc Heuse document on Securing a Web Server which I found very helpful, but he did not mention much about the database stuff. What security risks am I allowing by putting mySQL on this Web Server? What extra steps will I need to take? Is there a document somewhere that outlines the steps to securing mySQL on SuSE? Thanks, Robert