3 ms·
I can guess, how this can happen. --------------------- First,Take the db dump, for backups/setting up another server etc. $ mysqldump -u <user> -p <password>
by gary4gar 15y ago
I can guess, how this can happen.
---------------------
First,Take the db dump, for backups/setting up another server etc.
$ mysqldump -u <user> -p <password> <db name> > xyz.sql
Now, lets move db dump file to webroot, I hate SSH,FTP,RSYNC -- too complicated for me. I like clicking hyperlinks. KISS FTW!
I guess nobody will notice that file is present here. How can they know, I won't tell them!
$ mv xyz.sql public_html/uploaded/users
now, I can download it simply by going to
http://www.sosasta.com/uploaded/users/xyz.sql http://www.sosasta.com/uploaded/users/xyz.sql
See how easy this is, why complicate things unnecessarily.
---------------------
I guess the guy wouldn't have even imagined mighty google will index this & people from around will download the file, resulting in major security breach.
This is what you get when you act ignorant or plain lazy. poor guy...lol
- TeMPOraL 15y ago> This is what you get when you act ignorant or plain lazy. Or, in general case[1], when 'industry standard' tools are PITA to use. Simpler solutions are always preferred, for better or worse. [1] I'm not defending here the person that caused the SoSasta breach. EDIT: Formatting.