Not a stupid question, yes you access it through localhost and don't need to turn on remote access to the mysql server daemon.
Run this command: mysql_secure_installation
Google what all the questions are if you get confused, but this will help secure your installation. Set a really good password for the root. Don't use your mysql root account for php, create another account with only access to the databases it needs for php interaction.
reference for adding mysql users:
http://dev.mysql.com/doc/refman/5.1/en/ ... users.html