Merge pull request #115 from grooverdan/plugin-ok
A user with a plugin isn't the same as an empty password
This commit is contained in:
commit
47b702ba84
1 changed files with 1 additions and 1 deletions
|
@ -705,7 +705,7 @@ sub security_recommendations {
|
|||
|
||||
# Looking for Empty Password
|
||||
@mysqlstatlist = select_array
|
||||
"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE password = '' OR password IS NULL";
|
||||
"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE (password = '' OR password IS NULL) AND (plugin='' OR plugin IS NULL)";
|
||||
if (@mysqlstatlist) {
|
||||
foreach my $line ( sort @mysqlstatlist ) {
|
||||
chomp($line);
|
||||
|
|
Loading…
Reference in a new issue