The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Explain this - User gets another users mysql table in shop

Discussion in 'General Discussion' started by jeroman8, Jan 20, 2006.

  1. jeroman8

    jeroman8 Well-Known Member

    Joined:
    Mar 14, 2003
    Messages:
    410
    Likes Received:
    0
    Trophy Points:
    16
    A user runs a oscommerce shop.
    His manufactors table is showing his manufactors.
    When going to his page and view the manufactor list it shows another
    users manufactors list.

    ??

    It's only the manufactor table that is being added to the shop.
    All the other data is correkt, from the correct databas and tables.

    So one user gets another users mysql data added to his list of manufactors.
    All info is correct in his configure files for the shop - it uses his databas.
    So how can he get data from another mysql table and why only one table.

    I have deleted the database and mysql usernae.
    Installed a new one and new user and added fresh Osccommerce data.
    Now everything is fine.

    BUT if I instead add a mysqldump from his old database the same issue happens
    and now with ned databs name and new username.

    It's like there is something in the code in mysql.
    But if I compere with a fresh one, there is no difference, just less manufactors.

    I hope you follow me - it's as crazy as it sounds.
     
  2. jeroman8

    jeroman8 Well-Known Member

    Joined:
    Mar 14, 2003
    Messages:
    410
    Likes Received:
    0
    Trophy Points:
    16
    It is the table configure that is messing with this.

    When using this table in a oscommerce shop you will use anothre users manufactor tables instaed of your own. I have tried this on another user account with same result.
    If I delete the tavle configure and use one from a fresh install instead I do not have this issue anymore.

    There must be some code in there !?

    But I also tested using it on another server just to se whos table it was going to use there.
    But the problem is not there - maybe because the user is missing from thsi server and there is no other tables to "steal from".

    How can a user use another users mysql database in the first place.
    There's no priviliges for that.

    This is so wierd.
     
  3. jeroman8

    jeroman8 Well-Known Member

    Joined:
    Mar 14, 2003
    Messages:
    410
    Likes Received:
    0
    Trophy Points:
    16
    I guess no one else noticed this or it's a bad subject on this post but I just
    had another issue with this - new server and new clients but still with a oscommerce script.

    It's crazy...
    I'll sure contact cPanel support about this - if it's not my server being nuts
    it's a huge security issue.
     
  4. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,384
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page