Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
How do I deal with a compromised server?

I'm confused, i have a server that is accessible to the public, but i've been 3 times i was in the locker mysql root password by someone else, who knows the password that's just me. i've checked on the local web i dont find php injection and the like, and i already turn off the function exec in php like pasthru, exec, shell_exec, etc.

I'm using Ubuntu 10.04 Server. MySql Ver 14:14 Distrib 5.5.17. Webserver Nginx. PHPserver php5-fpm.

My question is: Is there an app that can change mysql root password, or that work to others, if it's someone else about where he came through?.

Thanks.

share|improve this question

marked as duplicate by SvW, faker, mdpc, chutz, growse Dec 22 '12 at 17:39

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
For security reasons mysql should not be accessible from the Internet. As you run php and nginx on the same server, you should restrict mysql connection to 127.0.0.1 and local socket. –  coincoin Dec 22 '12 at 12:29
    
Hi Sven, i dont understand whats your mine and your link! Hi Eric, yes my config just localhost, Mysql cannot run from internet with bind shared. –  Andi Unpam Dec 22 '12 at 13:43

1 Answer 1

Yes you can reset your mysql server password by going into safe mode please follow this link http://24x7servermanagement.com/blog/?p=44 I hope this will help you.

share|improve this answer
1  
I have done with another password, but a few weeks later will change again, who knows by whom. –  Andi Unpam Dec 22 '12 at 13:44
    
Please read our faq in particular May I promote products or websites I am affiliated with here?. –  Iain Dec 23 '12 at 23:25

Not the answer you're looking for? Browse other questions tagged or ask your own question.