Tutorial by Examples

Limit root (and any other SUPER-privileged user) to GRANT ... TO root@localhost ... That prevents access from other servers. You should hand out SUPER to very few people, and they should be aware of their responsibility. The application should not have SUPER. Limit application logins to the one...

The "host" can be either a host name or an IP address. Also, it can involve wild cards. GRANT SELECT ON db.* TO sam@'my.domain.com' IDENTIFIED BY 'foo'; Examples: Note: these usually need to be quoted localhost -- the same machine as mysqld 'my.domain.com' -- a specific domain; th...