Big problem.. protecting mysql from host.. - GoFuckYourself.com

xxweekxx · 01-15-2006, 12:21 PM

hey guys how do i protect my MYSQL database from my host..

Whats happening is i have a virtual hosting account and my host keeps messing with my MYSQL and changing info to steal my data.(Im using cpanel)

I could move hosts but i want to do that as a last resort..

Anyway to restrict access to MYSQL database to a certain ip only? even a way that the host himself cant access it?

Juicy D. Links · 01-15-2006, 12:23 PM

Ouch , I would change HOSTS ASAP bro.............Stealing data , who is this host btw?

Stallion · 01-15-2006, 12:24 PM

damn I would agree with Juicy, run very fast away from your host!

Calvinguy · 01-15-2006, 12:24 PM

Yeah names please

galleryseek · 01-15-2006, 12:25 PM

uhm... if your host is trying to steal data, why the hell would you ever consider staying for one more second?

Juicy D. Links · 01-15-2006, 12:26 PM

dump your sql db's back em up and then drop em....then move hosts.........

Dirty F · 01-15-2006, 12:27 PM

What kind of data and why? Thats retarded.

Tell us which host it is and move to someone else.

psili · 01-15-2006, 12:28 PM

I know you can grant / deny based on host / IP in the mysql "grant" function, but you're talking about a hosting company that has root to everything right? You can't deny root to someone who has root, unless I'm missing something.

Varius · 01-15-2006, 12:33 PM

No matter what you do, your host could always boot the machine in single-user mode locally, and even if you've protected mysql, there is a very simple method to restarting it while having it ignore the privileges / grant table.

The feature is there incase people forget their root pass to mysql...simple to do.

So, you only have one option: change host.

Matt 26z · 01-15-2006, 12:42 PM

This is nothing new. I've heard for years that some hosts snoop around their client's data looking for email collection databases. Email lists are then compiled by the host using their client's data and sold to spammers.

You can check if your host is doing this by putting a special email address into your database. If it ever gets spammed, you know your host is stealing from you.

Love Sex · 01-15-2006, 12:53 PM

so whos the host. I never understand why people get scammed and dont name the scammer.

baddog · 01-15-2006, 12:57 PM

I would be interested in how you know your host is doing this. But if they are, run, don't walk to a new host.

SirMoby · 01-15-2006, 01:06 PM

They're the host. The manage your server. They have root access and can touch the box. Change hosts.

Johny Traffic · 01-15-2006, 01:07 PM

Why are you even posting this? Change hosts. Why would you even think that staying with this host was ok?

asdfqwer · 01-15-2006, 01:44 PM

If you are sure that they are stealing the data then i would move away from that host asap

01-15-2006, 12:21 PM	#1
xxweekxx Confirmed User Join Date: Oct 2002 Posts: 6,780	Big problem.. protecting mysql from host.. hey guys how do i protect my MYSQL database from my host.. Whats happening is i have a virtual hosting account and my host keeps messing with my MYSQL and changing info to steal my data.(Im using cpanel) I could move hosts but i want to do that as a last resort.. Anyway to restrict access to MYSQL database to a certain ip only? even a way that the host himself cant access it? __________________ _________________ I am the best

01-15-2006, 12:24 PM	#3
Stallion Confirmed User Industry Role: Join Date: Jan 2001 Location: FL Posts: 6,632	damn I would agree with Juicy, run very fast away from your host! __________________ Project Manager/Program Manager/Webmaster Seeking Work [email protected] icq 856554

01-15-2006, 12:28 PM	#8
psili Confirmed User Join Date: Apr 2003 Location: Loveland, CO Posts: 5,526	I know you can grant / deny based on host / IP in the mysql "grant" function, but you're talking about a hosting company that has root to everything right? You can't deny root to someone who has root, unless I'm missing something. __________________ Your post count means nothing.

01-15-2006, 12:33 PM	#9
Varius Confirmed User Industry Role: Join Date: Jun 2004 Location: New York, NY Posts: 6,890	No matter what you do, your host could always boot the machine in single-user mode locally, and even if you've protected mysql, there is a very simple method to restarting it while having it ignore the privileges / grant table. The feature is there incase people forget their root pass to mysql...simple to do. So, you only have one option: change host. __________________ Skype variuscr - Email varius AT gmail

01-15-2006, 01:07 PM	#14
Johny Traffic Confirmed User Join Date: Apr 2003 Posts: 5,461	Why are you even posting this? Change hosts. Why would you even think that staying with this host was ok? __________________ hosted flv's, hosted galleries, morphing rss feeds, free content, free sites, hosted blog

01-15-2006, 12:23 PM	#2
Juicy D. Links So Fucking Banned Industry Role: Join Date: Apr 2001 Location: N.Y. -Long Island -- Posts: 122,992	Ouch , I would change HOSTS ASAP bro.............Stealing data , who is this host btw?

01-15-2006, 12:24 PM	#4
Calvinguy Confirmed User Join Date: Oct 2002 Location: European Union Posts: 1,752	Yeah names please

01-15-2006, 12:25 PM	#5
galleryseek Confirmed User Industry Role: Join Date: Mar 2002 Posts: 8,234	uhm... if your host is trying to steal data, why the hell would you ever consider staying for one more second?

01-15-2006, 12:26 PM	#6
Juicy D. Links So Fucking Banned Industry Role: Join Date: Apr 2001 Location: N.Y. -Long Island -- Posts: 122,992	dump your sql db's back em up and then drop em....then move hosts.........

01-15-2006, 12:27 PM	#7
Dirty F Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Posts: 59,204	What kind of data and why? Thats retarded. Tell us which host it is and move to someone else.

01-15-2006, 12:42 PM	#10
Matt 26z So Fucking Banned Industry Role: Join Date: Apr 2002 Location: ¤ª"˜¨๑۩۞۩๑¨˜"ª¤ Posts: 18,481	This is nothing new. I've heard for years that some hosts snoop around their client's data looking for email collection databases. Email lists are then compiled by the host using their client's data and sold to spammers. You can check if your host is doing this by putting a special email address into your database. If it ever gets spammed, you know your host is stealing from you.

01-15-2006, 12:53 PM	#11
Love Sex Confirmed User Join Date: Nov 2004 Posts: 1,905	so whos the host. I never understand why people get scammed and dont name the scammer.

01-15-2006, 12:57 PM	#12
baddog So Fucking Banned Industry Role: Join Date: Apr 2001 Location: the beach, SoCal Posts: 107,089	I would be interested in how you know your host is doing this. But if they are, run, don't walk to a new host.

01-15-2006, 01:06 PM	#13
SirMoby Confirmed User Join Date: Jan 2003 Posts: 583	They're the host. The manage your server. They have root access and can touch the box. Change hosts.

01-15-2006, 01:44 PM	#15
asdfqwer Confirmed User Join Date: Jul 2003 Posts: 431	If you are sure that they are stealing the data then i would move away from that host asap