I have a web business and it seems like someone has got the emails of our clients and is contacting them on behlaf of us to ruin our reputation
the client’s phon number gets stored on a database on ixwebhosting. so I can\t imagine that these guys are actually breaking into ixwebhostnig server and getting a copy of our database.
I was wondering if you have any feedback on this. Is it really possible for someone to take a copy of my database without having the username password?
I use mysql
Next: Which Web Host Is Better Godaddy Or Hostmonster?
Previous: How Do I Design A Registered Web Page?
"Can Someone Make A Copy Of My Website Database?" was posted on Friday, June 26th, 2009 at 7:03 am.
8 Responses to “Can Someone Make A Copy Of My Website Database?”
Leave a Reply
You can indeed change password of any users to whatever you like if you have access to mysql. May be you can contact a web developer at website like http://definitivelab.com/ to fix the issue.
The question is, can they *get* your username and password? It’s not uncommon for web designers to make a seemingly minor mistake and leave the plaintext of the username and password lying around the site in such a way that a sharp cracker might be able to find it. Obscurity (hiding it) is never good enough. It needs to be somewhere that they can’t get to it.
I would like to say, without the username or password it is impossible to login.. I have used sql for much time with numerous projects and find it very secure..
The hacker could have used packed sniffing while you, or the site made mysql connections, and then possibly have gotten the password or username, but that is unlikely..
Internet security is a funny subject
You can have millions of possibilities of security holes and big corp. spends a lot to cover them.
It like having five deadbolts on your front doors but you live in a house full of windows and glass doors.
I will not list the possibilities here but just a few that may be obvious and easy to implement.
1. Your password and login name is in a txt or other readable file. A person typing on the browser the link to the file can read it.
2. Your log in information is in a file that has familiar name – admin.php, login.txt and so on.
3. Your admin information is stored in a directory that can be access by browser – it doesn’t have redirect if someone just type the directory address. Meaning if I type for example http://www.yoursite.com/admin/ or something like that I will get listing of files of your directory, then I can download them and read them.
4. your setup or admin is listed on search engines – if you do not have proper indexing routing like robot.txt and .htaccess files the search engine robot will index them.
5. you may have some public log in with holes that allow hackers to get into your site.
Conclusion, if you are familiar with web design, checks these points first. If you don’t get a pro to do it
ps. Also some web email script leave log on the server of all the out going mail, usually txt log. This may be accessed also by someone familiar with your application – he know where to look
Thank you, great read!
Keep it up, thanks
Thank you for such a great resource
Please, can you PM me and tell me few more thinks about this, I am really fan of your blog…