Disable remote root logins into MySQL
To keep a MySQL database server secure, you should always only allow root logins from the local machine (localhost, 127.0.0.1 for IPv4, and ::1 for IPv6. Run the following SQL script against the MySQL server, to remove all access from remote hosts for the ‘root’ user account: DELETE FROM mysql.user WHERE User=’root’ AND Host NOT …