Re: Uncovering user passwords

[Darren Cassar]

Uncovering a password is always a HUGE security flaw and should never be available.
In MySQL you can reset a user's password very easily in quite a few ways, amongst others, login as root on any (free) UI Admin tool like MySQL administrator or Toad, find user's aministration and reset the password from there, otherwise you can simply use the good old CLI

> mysql -u root -p
--- enter password here ---
> USER mysql;
> UPDATE user SET Password=PASSWORD('newpassword') where User='username';
> FLUSH PRIVILEGES;
> EXIT

> mysql -u username - p
---- enter new password here ----

Congrats!