Merge pull request #115 from grooverdan/plugin-ok

A user with a plugin isn't the same as an empty password
This commit is contained in:
Jean-Marie Renouard 2015-08-24 09:39:19 +02:00
commit 47b702ba84

View file

@ -705,7 +705,7 @@ sub security_recommendations {
# Looking for Empty Password
@mysqlstatlist = select_array
"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE password = '' OR password IS NULL";
"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE (password = '' OR password IS NULL) AND (plugin='' OR plugin IS NULL)";
if (@mysqlstatlist) {
foreach my $line ( sort @mysqlstatlist ) {
chomp($line);