<h2>Edit File - securemysql</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/securemysql">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

#                                      Copyright 2024 WebPros International, LLC
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited.

use strict;
use warnings;

use Getopt::Std;
use Cpanel::MysqlUtils::Check        ();
use Cpanel::MysqlUtils::Secure       ();
use Cpanel::SafeRun::Simple          ();
use Cpanel::MysqlUtils::Connect      ();
use Cpanel::MysqlUtils::MyCnf::Basic ();
use Cpanel::AdminBin::Serializer     ();    # PPI USE OK - loadConfig speed
use Cpanel::Config::LoadConfig       ();    # PPI USE OK - For MyCnf::Basic
use Cpanel::PwCache                  ();    # PPI USE OK - For MyCnf::Basic
use Try::Tiny;

# Only run if executed by root
exit if ( $&gt; != 0 );

# Don&#039;t run if MySQL is not used
exit if ( -e &#039;/etc/securemysqldisable&#039; || -e &#039;/etc/mysqldisable&#039; );

my $version = qq{0.3};
my $verbose = 1;
my $fast    = 0;
my $help    = 0;
my $actions = q{};

my %options;
getopts( &#039;qFha:&#039;, \%options );
if ( exists $options{&#039;q&#039;} ) {
    $verbose = 0;
}
if ( exists $options{&#039;F&#039;} ) {
    $fast = 1;
}
if ( exists $options{&#039;h&#039;} ) {
    $help = 1;
}
if ( exists $options{&#039;a&#039;} ) {
    $actions = $options{&#039;a&#039;};
    if ( !defined $actions || $actions eq &#039;&#039; ) { $actions = &#039;all&#039;; }
}
my @actions;
if ( $actions ne &#039;all&#039; &amp;&amp; $actions ne &#039;&#039; ) {
    $actions =~ s{ [^a-z0-9,]+ }{}gxms;
    @actions = split /,/, $actions;
}
my $actionsall = 0;
if ( $actions eq &#039;all&#039; || grep m{ \A all \z }xms, @actions ) { $actionsall = 1; }
if ($actionsall)                                             { print &quot;Performing all actions.\n&quot; if $verbose; }
my %actions = (
    &#039;removeanon&#039;         =&gt; $actionsall,
    &#039;removetestdb&#039;       =&gt; $actionsall,
    &#039;removelockntmp&#039;     =&gt; $actionsall,
    &#039;removeremoteroot&#039;   =&gt; $actionsall,
    &#039;chowndatadir&#039;       =&gt; $actionsall,
    &#039;removepublicgrants&#039; =&gt; $actionsall,
);
foreach my $action (@actions) {
    if    ( exists $actions{$action} || $actionsall ) { $actions{$action} = 1; }
    elsif ($verbose)                                  { print &quot;Invalid action $action ignored.\n&quot;; }
}

$actions{&#039;securemycnf&#039;} = 1;    # we always do this

if ( !-t STDOUT ) { $verbose = 0; }

if ( $help || ( $verbose &amp;&amp; !$fast ) ) {
    print &lt;&lt;&quot;EOM&quot;;
securemysql $version

 Options:
 -q  - Quiet execution
 -F  - Bypass the help message
 -a  - Specify additional actions (comma separated list), or blank for all
 -h  - Print this message and exit.

This script attempts to secure the MySQL configuration by doing the following:
 (always executed) Ensure root password for MySQL is set.
 (always executed) Changes ownership of /var/db/mysql or /var/lib/mysql to mysql
 Additionally, the following actions can be specified:
    [optional]
    removeanon           - Remove any anonymous users
    removetestdb         - Remove test database
    removelockntmp       - Remove global lock tables and create tmp table privileges from users
    removeremoteroot     - Remove remote root login
    chowndatadir         - Chown the mysql data directory to mysql:mysql
    removepublicgrants   - Removes insecure public grants on MariaDB 10.11 and later.

 Examples:
    ./securemysql -q -F -a removeanon,removetestdb,removelockntmp,removeremoteroot
    ./securemysql -q -F -a &quot;removeanon, removetestdb, removelockntmp&quot;

EOM
    exit if $help;
    sleep 5;
}

if ( Cpanel::MysqlUtils::MyCnf::Basic::is_remote_mysql() ) {
    print &quot;Remote MySQL configured. Exiting.\n&quot; if $verbose;
    exit;
}

my $err;
my $dbh;
try {
    $dbh = Cpanel::MysqlUtils::Connect::get_dbi_handle();
}
catch {
    $err = $_;
};

if ( !$dbh ) {

    my $ret      = Cpanel::SafeRun::Simple::saferun( &#039;/usr/local/cpanel/scripts/restartsrv_mysql&#039;, &#039;--check&#039; ) // &#039;&#039;;
    my $check_ok = $? == 0 ? 1 : 0;

    if ( !$check_ok ) {

        # This will force a password reset if password is wrong/blank
        $check_ok = Cpanel::MysqlUtils::Check::check_mysql_password_works_or_reset();

        if ( !$check_ok ) {

            # Case 169937, if I die here it will show like an error on the main
            # screen.
            print &quot;Mysql is not running: $ret: $err\n&quot;;
            exit;
        }
    }
    $dbh = Cpanel::MysqlUtils::Connect::get_dbi_handle();
}

if ( values %actions ) {
    Cpanel::MysqlUtils::Secure::perform_secure_actions( $dbh, \%actions, $verbose );
}
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>