MYSQL Rights and Passwords

[rjseals]

Hello,
I just installed MYSQL on a windows machine and everything seems to be working fine except I cant set passwords to any accounts or basically any username can log in (even if I didnt create it). For instance I will type

>mysqladmin -u root password newpassword
and then
>mysql -u root -p
then I will type in the password I just gave it and it says access denied. but when I do the same command and dont enter a password I can get in without any problems.

Also i can put in anything for a user name and get into it. The reason this is such a problem is because I am going to use phpMyAdmin and dont want everyone in the world to get into my database. I have set up MYSQL on Linux and didnt have this problem.

Any suggestions?

Thanks

 

[abombss]

RTFM "

http://www.mysql.com/doc/en/Windows_running.html"

The default privileges on Windows give all local users full privileges to all databases without specifying a password. To make MySQL more secure, you should set a password for all users and remove the row in the mysql.user table that has Host='localhost' and User=''.

You should also add a password for the root user. The following example starts by removing the anonymous user that has all privileges, then sets a root user password:

C:\> C:\mysql\bin\mysql mysql
mysql> DELETE FROM user WHERE Host='localhost' AND User='';
mysql> QUIT
C:\> C:\mysql\bin\mysqladmin reload
C:\> C:\mysql\bin\mysqladmin -u root password your_password
After you've set the password, if you want to shut down the mysqld server, you can do so using this command:

C:\> mysqladmin --user=root --password=your_password shutdown