RFE: Database User Password Change

Coincidentally related to Bug #535, I just got a request from a client to set his MySQL database password to something different than his administrative login password. He feels that it is a security risk to have them the same, since the database password is visible in clear text in PHP scripts. Even though these scripts have 600 permissions, that still doesn't give much comfort on a shared virtual server system. I tend to concur with his concern.

The problem is that there is no way for a domain owner to change their database password currently. The option doesn't appear either in Virtualmin or in the Webmin MySQL module (for their permission level). Ideally, this option should appear under the Edit Databases option near where the domain owner can already change their username.

Also, it would be nice if when changing the main virtual server password, if there is an option to also change the database password. The option should be enabled by default, but in his case, it will give him the ability to turn it off so that it doesn't overwrite his separate database password.

Status: 
Closed (fixed)