What the!? .... that's not my database! And is this site hosting illegal MP3's???

[user-7256]

Hi,

I just checked my phpMyAdmin at ZSR.us, find a database that IS NOT MINE has appeared called "test"... and no pre/suffixes meaning that it wasn't made in CPanel... hmm... and PHPmyAdmin doesn't have the permissions to make a db.

Inside I find the config table which has the URL of the site that it's used on. The site: www.LandingMovie.ca

The link to their forums is down, but they have... ooh.... is that possibly illegal trailers or MP3's?

There's a link to contact the webmaster. I've contacted my host but want to contact the webmaster just to vent my anger or somethin.

What can I say to intimidate them?

Thanks,
-Matt

UPDATE: On their site it says: "a hosting problem took us offline for a while." ... I'm hosted with PolurNet but I doubt it could be THEIR fault... this is crazy. Help!!

 

[slantednet]

Wow... originally I thought that would be the server admin that would have that ability, but apparently with Cpanel you can create databases with the mysql CLI tool from the command line without following the naming conventions... hmm...

That's interesting.

 

[user-7256]

So any advice?

ANOTHER UPDATE: I just see that the domain is registered at "Namespro Solutions Inc."

I have never heard of that registrar... have you? O.o

 

[KPR]

http://www.namespro.ca/

Thats them from what i can see.

 

[Scott]

I don't understand what's going on here. You found a table called 'test' in PhpMyAdmin? That's standard and nothing to worry about. What else?

 

[PolurNET]

We're looking into this, but I don't think it's anything to be worried about. Perhaps a fluke?

Also, don't contact their webmaster, they can't do anything. We'll check if wrong permissions were set on the table by some other technicians.

EDIT: That account is on the same server as you, what we call "Polaris", and seems just a wrong table had the wrong permissions.

 

[user-7256]

Ah, okay. Thanks!

Problem solved :red:

 

[vip-ip]

I host with PolurNET and I have experienced the same, although I did not notice any links in it :o

 

[PolurNET]

Yeah just disregard it, it's no harm

 

[Mike_Wiseman]

No matter where i get hosting form i always find a test db in phpmyadmin.... i dont think theres anything to worry about.

EDIT: Sorry i didnt see the rest of the title, can you just delete the db?

 

[slantednet]

The problem is that the "control" of the tables is controlled through Cpanel. If you bypass Cpanel to create the table (through the mysql command line) you can create a table that's not within the naming convention that Cpanel relies on. (I.e., in cpanel, your databases are prefixed with your username, using mysql you can create tables without the username in the front).

Apparently, when cpanel checks what databases are available to you (for cpanel and phpmyadmin) it checks for all the databases with your username prefix as well as all the databases without a username prefix. This is purely a visibility thing, I would think that the database is still counted against the creater's webspace (maybe a Cpanel host can verify this for me) so there shouldn't be anything you should have to worry about.

The risk: to you, nothing.. you can see his database, and hopefully it's created against the creating users webspace (again, a cpanel host could verify this)... the risk to the creator is everyone has visibility to his database. They may not be able to login, but the obscurity of the database name is one level of protection against attack. The creator is just opening himself to risk.

On cpanel hosts, you have access to everyone's databases on the shared system anyways, as long as you know the name, username and pw you can access any db from any account. So this is really nothing different than normal operations except that you can see his database. Nothing to worry about really.