Aug

18

3

Passwordless MySQL root account in shared hosting

shakir    Information Insemination    

I was doing some work with many terminals open, and in one terminal I typed the following to access my MySQL databases;

$ mysql -u root

and I’ve been granted access, as I don’t set any password for my local MySQL account. I was somehow surprised however when I run the following command

mysql> show databases;

as I’ve been presented with many databases, maybe hundreds of them, and with that I realize something is not right somewhere. Upon checking, I found out that I was accessing the wrong server, and to my surprise again, it’s in my shared webhosting’s server.

When thinking creating rogue PHP scripts will let you do what your jailshell won’t let you do, this incident make me want to have a co-located server even more. I guess it’s a bad idea now to have all my shells to look the same when working with multiple terminals.

If you enjoyed this article please consider sharing it!

3 Comments to “Passwordless MySQL root account in shared hosting”

• 

  Danesh August 23, 2008 at 11:45 pm

  Talk to the hosting company and get to sponsor you a co-hosted package for your discovery…
• 

  shakir August 24, 2008 at 5:21 am

  I blog about this actually because I was frustrated when I got no reply from the hosting company after reporting to them about this, though there was not even a mention about getting free hosting whatsoever in the email. At least not yet

  For update, the problem is still there..
• /home/shakir » Blog Archive » Cheap VPS hosting, anyone? September 11, 2008 at 2:14 pm

  [...] in Information Insemination Due to some serious problems with shared webhosting, as I blogged here and here, I’m now seriously considering to self-host all my [...]