Question

I have a script that’s named config.php. Inside this script are variables that contain mysql login info, etc. Some kid keeps saying he has root access to my site and recently we just heard of a leak though don’t know if it can be substantiated or not. I know that you put exit; after header(location:.. to stop script executing; is the same thing necessary in this case? How can this be exploited?

Answer 1

If someone has root access to your server, he can just open the file and view the password. Also, he can reset the mysql root password, and gain access to it.

Some resources:

• https://serverfault.com/questions/218138/finding-how-a-hacked-server-was-hacked
• https://serverfault.com/questions/179876/hacked-by-black-jaguar