MySQL Forums
Forum List  »  Security

MYSQL_PWD env variable precedence
Posted by: Eduardo Krieg
Date: May 09, 2019 10:56AM


I thing I've hitted a bug, but first I'd like to ask to this forum if it is really a bug or the behavior is expected and somehow justified.

Trying to avoid the "Using a password on a command line is insecure" warning, I was trying to use the env variable "MYSQL_PWD". It works fine, until you use a my.cnf file with the password parameter on the [client] section.

The password on the config file takes precedence over the env variable, which I think it's incorrect, because maybe the password on the config file belongs to a different user than the one trying to connect via the env variable password.


Options: ReplyQuote

Written By
MYSQL_PWD env variable precedence
May 09, 2019 10:56AM

Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.