How do I deal with a compromised server?
I'm confused, i have a server that is accessible to the public, but i've been 3 times i was in the locker mysql root password by someone else, who knows the password that's just me. i've checked on the local web i dont find php injection and the like, and i already turn off the function exec in php like pasthru, exec, shell_exec, etc.
I'm using Ubuntu 10.04 Server. MySql Ver 14:14 Distrib 5.5.17. Webserver Nginx. PHPserver php5-fpm.
My question is: Is there an app that can change mysql root password, or that work to others, if it's someone else about where he came through?.