Secure Databases?
Discussion
Having suffered at the hands of a virus on my host company's server that took out all their
Mambo databases, they are now suggesting that Mambo may be dumped due to security issues.
They are suggesting Wordpress may take its place as their available application, but what
would you guys suggest to be the most secure (as anything can be!) and user friendly
and to be honest, free database package?
Thanks in advance.
Mambo databases, they are now suggesting that Mambo may be dumped due to security issues.
They are suggesting Wordpress may take its place as their available application, but what
would you guys suggest to be the most secure (as anything can be!) and user friendly
and to be honest, free database package?
Thanks in advance.
plasticpig said:
Since Mambo and Wordpress both use MySql as a datatabase server i cant see how switching between them would help database security.
It wont help database security in itself, but it may well stop any offender gaining access via a compromised script (ie mambo) and junking the database.
Ofcourse what you really should be asking is said:
Does anyone know of a host where, if someone else's slack / insecure website is exploited, my website will be fine and my data secure..
and we all know the answer to that one 
Check my profile if you get bored.
J
JamieBeeston said:
plasticpig said:
Since Mambo and Wordpress both use MySql as a datatabase server i cant see how switching between them would help database security.
It wont help database security in itself, but it may well stop any offender gaining access via a compromised script (ie mambo) and junking the database.
Ofcourse what you really should be asking is said:
Does anyone know of a host where, if someone else's slack / insecure website is exploited, my website will be fine and my data secure..
and we all know the answer to that one Check my profile if you get bored.
J
Ha-ha - don;t you already get enough of my business?!
Also gave you a free plug not 10 mins ago on another thread!
Cuban said:
Ha-ha - don;t you already get enough of my business?!
Also gave you a free plug not 10 mins ago on another thread!
Also gave you a free plug not 10 mins ago on another thread!
As the Bond title goes 'The World is not Enough!' The more business I get (from recommendations as well!) the more staff / servers / network links / for PH'rs I can get You're helping yourself by plugging Register1
J
JamieBeeston said:
Tonsko said:
So, if we click the links in your profile, Jamie, and end up buying a hosting package with you, do we get a special pistonheads discount?
sure, you get a or maybe even something bubblier at whatever PH event you catch me @ as a fair few happy clients can already attest
J
Ah, shame, I live in Leeds really
Tonsko said:
JamieBeeston said:
Tonsko said:
So, if we click the links in your profile, Jamie, and end up buying a hosting package with you, do we get a special pistonheads discount?
sure, you get a or maybe even something bubblier at whatever PH event you catch me @ as a fair few happy clients can already attest
J
Ah, shame, I live in Leeds really
Doesnt stop you attending BTaP or PistonFest or any of the other many PH events
J
Bouncing this up again as the real subject kind of got overlooked. Cuban,
Just to clarify,
Mambo isn't a a Database, it's a Content Management System (CMS)
The issue with your last host wont have been related to a security breach with the database software, more an insecure setup which allowed a breach in Mambo (or ANY insecure software) to effect sites / services OUTSIDE of the scope of that individual site..
This isn't an issue with the software per se, as much as with the whole infrastructure method used by any host that permits this.
On Register1, each site is 'jailed' so that it operates inside it's own mini environment, no one site has access to the files / databases of any other site, so if one site ever was hacked (we cant stop clients installing dodgy / unpatched / insecure software, that's their choice!) it would only effect THEIR own site, no-one elses.
Sounds like your last place didn't do this..
So long as you keep your Mambo install 'up-to-date' and apply the latest patches as they come out, AND keep regular backups (we backup every VDS every night!) then I cant see you having any issue keeping your current setup..
J
Just to clarify,
Mambo isn't a a Database, it's a Content Management System (CMS)
The issue with your last host wont have been related to a security breach with the database software, more an insecure setup which allowed a breach in Mambo (or ANY insecure software) to effect sites / services OUTSIDE of the scope of that individual site..
This isn't an issue with the software per se, as much as with the whole infrastructure method used by any host that permits this.
On Register1, each site is 'jailed' so that it operates inside it's own mini environment, no one site has access to the files / databases of any other site, so if one site ever was hacked (we cant stop clients installing dodgy / unpatched / insecure software, that's their choice!) it would only effect THEIR own site, no-one elses.
Sounds like your last place didn't do this..
So long as you keep your Mambo install 'up-to-date' and apply the latest patches as they come out, AND keep regular backups (we backup every VDS every night!) then I cant see you having any issue keeping your current setup..
J
JamieBeeston said:
On Register1, each site is 'jailed' so that it operates inside it's own mini environment, no one site has access to the files / databases of any other site
Just out of interest Jamie, (and not related to our hosting) but how do you deal with PHP Session information, is that shard in the same directory as other virtual hosts?
cheers
Ex
b.t.w. Me and Mick demolished 1/2 a bottle of the Middleton Very Rare the other night and raised a glass to your health :hic:
TheExcession said:
JamieBeeston said:
On Register1, each site is 'jailed' so that it operates inside it's own mini environment, no one site has access to the files / databases of any other site
Just out of interest Jamie, (and not related to our hosting) but how do you deal with PHP Session information, is that shard in the same directory as other virtual hosts?
cheers
Ex
b.t.w. Me and Mick demolished 1/2 a bottle of the Middleton Very Rare the other night and raised a glass to your health :hic:
With each account being tailed, each account has it's own filesystem structure (/etc / /var and crucially /tmp) so each sites session info goes into its own /tmp
my health is suffering atm, tonsilitis :| but I'm happy to hear you're working your way through it... I'm relishing the day I get to open mine Spoof ehhe
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff