Results 1 to 3 of 3
  1. #1
    Join Date
    Mar 2011
    Posts
    10

    Unanswered: Webhost support team can access database

    Hi all,

    This is probably a very basic question, but it has recently come to my attention that the support team of the webhost that is hosting my website+database (shared hosting) can create a new user with full privileges and access my database.

    Is this normal? Seems like a bit of a security gap...
    Can I prevent this?

    Thanks!

  2. #2
    Join Date
    Nov 2004
    Location
    out on a limb
    Posts
    13,692
    Provided Answers: 59
    if you think its a problem then you need to contact your ISP
    essentially by having your site hosted by a third party there has to be an element of trust between the two of you.

    depending on the size of the ISP it may well be that the support team is also the technical team who would almost de facto have access to your db, just that you didn't know it.

    so I'd suggest you need to discuss your secrecy / privacy arrangements with the ISP
    also you need to design your system to make it as hared as possible for the malicious abuser to profit from your data
    I'd rather be riding on the Tiger 800 or the Norton

  3. #3
    Join Date
    Sep 2009
    Location
    San Sebastian, Spain
    Posts
    880
    Administrators can always access anyones information, whether this is Windows, Linux, MySQL or whatever. This is needed to be able to help with support type issues and general maintenance (taking backups etc).
    Ronan Cashell
    Certified Oracle DBA/Certified MySQL Expert (DBA & Cluster DBA)
    http://www.it-iss.com
    Follow me on Twitter

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •