Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
How do I deal with a compromised server?

I'm confused, i have a server that is accessible to the public, but i've been 3 times i was in the locker mysql root password by someone else, who knows the password that's just me. i've checked on the local web i dont find php injection and the like, and i already turn off the function exec in php like pasthru, exec, shell_exec, etc.

I'm using Ubuntu 10.04 Server. MySql Ver 14:14 Distrib 5.5.17. Webserver Nginx. PHPserver php5-fpm.

My question is: Is there an app that can change mysql root password, or that work to others, if it's someone else about where he came through?.


share|improve this question

marked as duplicate by Sven, faker, mdpc, chutz, growse Dec 22 '12 at 17:39

This question was marked as an exact duplicate of an existing question.

For security reasons mysql should not be accessible from the Internet. As you run php and nginx on the same server, you should restrict mysql connection to and local socket. – user130370 Dec 22 '12 at 12:29
Hi Sven, i dont understand whats your mine and your link! Hi Eric, yes my config just localhost, Mysql cannot run from internet with bind shared. – Andi Susilo Dec 22 '12 at 13:43

Yes you can reset your mysql server password by going into safe mode please follow this link I hope this will help you.

share|improve this answer
I have done with another password, but a few weeks later will change again, who knows by whom. – Andi Susilo Dec 22 '12 at 13:44
Please read our faq in particular May I promote products or websites I am affiliated with here?. – Iain Dec 23 '12 at 23:25

Not the answer you're looking for? Browse other questions tagged or ask your own question.