blocks|key|800481|text|如果用户名和密码存储在数据库中，那么除了首先连接之外，显然没有其他方法可以检查它们。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|800482|你能做的最好的事情就是在他们登录的时候才连接到数据库。一旦它们通过身份验证，您可以在磁盘上存储某种形式的会话信息，但这不是一个很好的解决方案。|800483|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

If the username and password are stored in the database, then there's obviously no other way to check them other than to connect first.

The best you could do is perhaps only connect to the DB when they log in. Once they're authenticated, you could store some form of session information on disk, but it's not a great solution.

blocks|key|807196|text|简而言之-如果用户In+/密码存储在数据库中，则不可用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|807197|身份验证基本上意味着您将对质询的响应与已知值进行比较。如果您没有要比较的值，则无法进行身份验证。|807198|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

In short - not posssible if the userid/password are stored in the database.

Authentication basically means that you compare the response to a challenge with known values. If you do not have the values to compare with , you cannot authenticate.

blocks|key|4194508|text|一种可能的解决方案是设计某种方案，其中用户名/密码是加密/解密密钥对。显然，在分配用户名的情况下，这会更可行，但如果这是主要目标，这样的策略将允许您不访问数据库。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4194509|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

One possible solution would be to devise some sort of scheme where the username/password are an encryption/decryption key pair. Obviously, this would be more feasible in an assigned username world, but such a policy would allow you not to hit the database if that is the primary objective.

blocks|key|2728701|text|我认为这个问题是可以解释的。大多数人都会说“您不能”，但是如果您实际问的是“如何使用MySQL验证用户身份而不实际使用数据库呢？”那就完全是另一回事了。看看mod_auth_mysql，一个Apache模块就可以做到这一点。如果我们有更多关于你到底想要做什么的细节，人们可能会更坦率。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2728702|entityMap|0|LINK|mutability|MUTABLE|url|http://modauthmysql.sourceforge.net/^0|26|E|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

I think this question is open to interpretation. Most people will jump in and say "You can't.", but if what you are actually asking is "How do I use MySQL to authenticate a user but not actually use the database?" then that's a whole different ball game. Take a look at <a href="http://modauthmysql.sourceforge.net/" rel="nofollow noreferrer">mod_auth_mysql</a>, an Apache module which does exactly that. If we had more details on what exactly you were trying to do, folks might be more forthcoming.

blocks|key|4194561|text|如果您想检查MySQL用户名/密码是否有效，而不是以该用户身份连接到MySQL，那么您应该查看mysql数据库中的用户表。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4194562|但我建议您不要这么做；这实际上是内部MySQL实现的细节，您真的不应该依赖它。(例如，如果MySQL有一天获得了LDAP怎么办？)|4194563|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

If you want to check if a MySQL username/password is valid, without connecting to MySQL as that user, then you should take a look at the the users table in the mysql database.

But I'd recommend not doing this; that is really an internal MySQL implementation detail, and you really shouldn't depend on it. (e.g., what if MySQL gets LDAP auth someday?)

blocks|key|800547|text|以有权访问"mysql“数据库(模式)的用户身份登录，并执行以下操作:+SELECT+COUNT(*)+FROM+MYSQL.USER+WHERE+USERNAME=？和PASSWORD=PASSWORD(?)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|800548|如果计数>0，则用户名/密码正确。|800549|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Login as someone who has access to "mysql" database (schema), and do:
SELECT COUNT(*) FROM MYSQL.USER WHERE USERNAME=? AND PASSWORD=PASSWORD(?)

If the count > 0 then the username/password is correct.

How do I check if a user/password pair works without actually making a connection to the database?
The DBMS in question is MySQL.

That was my original question. Since most people get this question wrong, then I should rephrase it as:
How do I check if a MySQL username/password is valid, without connecting to MySQL as that user? (thanks to derobert)

I actually found a solution, check my answer below.

How to check if the user and password works without making a connection to a database

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

如何在不实际连接到数据库的情况下检查用户/密码对是否正常工作？有问题的数据库管理系统是MySQL。这是我最初的问题。由于大多数人都理解错了这个问题，因此我应该将其重新表述为:如何在不以MySQL用户身份连接到MySQL的情况下检查该用户名/密码是否有效？(感谢derobert)我实际上找到了一个解决方案，请检查我下面的...

问如何在不与数据库建立连接的情况下检查用户和口令是否有效
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在不与数据库建立连接的情况下检查用户和口令是否有效EN