Originally Posted by V_RocKs

And if they stole your pass file... They most likely have shell access to the server... And if they have that... They can do anything your web server can do... Play with MYSQL, post to your billlers (cancel all of your members), etc...