Re: Shared Hosting and Security Qualms ...

I am, the provider has been instructed to close the account. I am still wondering if this is typical for a shared environment. I'm now looking at a virtual server solution. Cheers - Miles At 11:48 PM 8/15/2002 +1000, Justin French wrote:

I'd be running away :) Justin French on 15/08/02 10:36 PM, Miles Thompson (milesthompson@ns.sympatico.ca) wrote: This is somewhat off-topic, but has to do with shared hosting. All of my experience with Linux has been on boxes where I've pretty well had the only account. I'm now working on a shared system which provides SSH access. The idea is to host a client's site on this system, but after a few hours of exploring here's why I'm having second thoughts. I can move up the directory tree and see all the other users directories, the contents thereof, and individual files, such as "/use/home/other_user/today.html". Permissions are such that I was not able to edit or copy them. (I tried.) The contents of etc/passwd could be listed. mysqlshow listed all the databases on the system; with the mysql console I was able to examine the structure and contents of any of them, with a couple I went further and added a table, inserted records, and dropped the table. I could also insert records (which I subsequently deleted) into existing tables. Call me naive, but is this normal, or should I bail on this arrangement before going any further? It's a BSD system. Comments and opinions are solicited. Regards - Miles Thompson