Re: Shared Hosting and Security Qualms ...
| From: | Justin French | Date: | Thu, 15 Aug 2002 14:34:59 +0000 |
| Subject: | Re: Shared Hosting and Security Qualms ... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-112762@lists.php.net to get a copy of this message | ||
It's not typical of my shared server.
I have no SSH, and haven't been able to find a way (yet) of browsing or
accessing anything that isn't mine... yet!
Justin
on 16/08/02 12:28 AM, Miles Thompson (milesthompson@ns.sympatico.ca) wrote:
> I am, the provider has been instructed to close the account. I am still
> wondering if this is typical for a shared environment. I'm now looking at a
> virtual server solution.
>
> Cheers - Miles
>
> At 11:48 PM 8/15/2002 +1000, Justin French wrote:
>> I'd be running away :)
>>
>> Justin French
>>
>>
>> on 15/08/02 10:36 PM, Miles Thompson (milesthompson@ns.sympatico.ca) wrote:
>>
>>> This is somewhat off-topic, but has to do with shared hosting. All of my
>>> experience with Linux has been on boxes where I've pretty well had the only
>>> account. I'm now working on a shared system which provides SSH access. The
>>> idea is to host a client's site on this system, but after a few hours of
>>> exploring here's why I'm having second thoughts.
>>>
>>> I can move up the directory tree and see all the other users directories,
>>> the contents thereof, and individual files, such as
>>> "/use/home/other_user/today.html". Permissions are such that I was not able
>>> to edit or copy them. (I tried.) The contents of etc/passwd could be
>> listed.
>>>
>>> mysqlshow listed all the databases on the system; with the mysql console I
>>> was able to examine the structure and contents of any of them, with a
>>> couple I went further and added a table, inserted records, and dropped the
>>> table. I could also insert records (which I subsequently deleted) into
>>> existing tables.
>>>
>>> Call me naive, but is this normal, or should I bail on this arrangement
>>> before going any further? It's a BSD system.
>>>
>>> Comments and opinions are solicited.
>>>
>>> Regards - Miles Thompson
>>>
>>>
>
>