Big problem.. protecting mysql from host..
 

hey guys how do i protect my MYSQL database from my host..

Whats happening is i have a virtual hosting account and my host keeps messing with my MYSQL and changing info to steal my data.(Im using cpanel)

I could move hosts but i want to do that as a last resort..

Anyway to restrict access to MYSQL database to a certain ip only? even a way that the host himself cant access it?

Ouch , I would change HOSTS ASAP bro.............Stealing data , who is this host btw?

damn I would agree with Juicy, run very fast away from your host!

Yeah names please :upsidedow

uhm... if your host is trying to steal data, why the hell would you ever consider staying for one more second?

dump your sql db's back em up and then drop em....then move hosts.........

What kind of data and why? Thats retarded.

Tell us which host it is and move to someone else.

I know you can grant / deny based on host / IP in the mysql "grant" function, but you're talking about a hosting company that has root to everything right? You can't deny root to someone who has root, unless I'm missing something.

No matter what you do, your host could always boot the machine in single-user mode locally, and even if you've protected mysql, there is a very simple method to restarting it while having it ignore the privileges / grant table.

The feature is there incase people forget their root pass to mysql...simple to do.

So, you only have one option: change host.

This is nothing new. I've heard for years that some hosts snoop around their client's data looking for email collection databases. Email lists are then compiled by the host using their client's data and sold to spammers.

You can check if your host is doing this by putting a special email address into your database. If it ever gets spammed, you know your host is stealing from you.

so whos the host. I never understand why people get scammed and dont name the scammer.

I would be interested in how you know your host is doing this. But if they are, run, don't walk to a new host.

They're the host. The manage your server. They have root access and can touch the box. Change hosts.

Why are you even posting this? Change hosts. Why would you even think that staying with this host was ok?

If you are sure that they are stealing the data then i would move away from that host asap