Elxis CMS Forum

Support => Database => Topic started by: StefanSultanov on June 26, 2009, 15:46:43

Title: Something or somebody changes mySQL password
Post by: StefanSultanov on June 26, 2009, 15:46:43

Hello!

The site password constantly changes to "YES".

First it happened to www.lechebnizavedenia.com - Elxis 2008.0 Nemesis
Now it is happening with a second site I'm building - Elxis 2009.0 Pandora

Any Ideas?  Could it be happening during server interaction?  ???

Title: Re: Something or somebody changes mySQL password
Post by: ks-net on June 26, 2009, 15:52:03

site or mysql password?

both are strange... and first time hear about this..... 

check your server .. ask server administrator... who else have access?

Title: Re: Something or somebody changes mySQL password
Post by: jimmyz on June 26, 2009, 16:11:03

In file configuration.php, line 10 $mosConfig_user = 'username'; and line11 $mosConfig_password = 'xxx'; lays the username and pass for accessing the mysql database.

In database table elx_users, you can see the "Super Administrator's" md5 hash of the password used to access administration panel, under "id" 62.

Title: Re: Something or somebody changes mySQL password
Post by: StefanSultanov on June 26, 2009, 16:14:00

Yes I asked.

First with the Nemesis it was easy cause I made the configuration.php - unwritable.
But with the Pandora it is even stranger because the hosting package doesn't utilise a domain name i. e. no one knows it and no one except me has access officialy.

There has been only 5 minutes since I finished installation and ZAP! Same thing. The bad news is that I didn't see the password for the Data Base to change in the new version's configuration.php.

So I will have to reupload and install. I will be glad to give you the address if it happens again.

Thanks

Title: Re: Something or somebody changes mySQL password
Post by: StefanSultanov on June 26, 2009, 17:46:29

Hey, I'm back again!

Check this out
PHP Error [Warning]
URI: index2.php?mosmsg=The+configuration+details+have+been+updated%21
Path: /includes/adodb/drivers/adodb-mysql.inc.php
Line: 382
mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)
mysql Error [1045] : PCONNECT
URI: index2.php?mosmsg=The+configuration+details+have+been+updated%21
Message: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)
localhost
alphab7csd

Title: Re: Something or somebody changes mySQL password
Post by: ks-net on June 26, 2009, 18:24:34

i have replied to your PM... you cant connect to DB because of wrong pass or username.... your pass didn't changed to YES or something else

EDit.. just remember this
MKjys78vgRpwek  this username is too long .... there is a case that long usernames and DB names are produces errors (mysql relative problems )

try to use a DB username  and name with about 7 chars .. no more

Title: Re: Something or somebody changes mySQL password
Post by: datahell on June 26, 2009, 19:31:57

mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)

This does not means that your password changed to "YES". This means that user "MKjys78vgRpwek" tried to connect to the database using his password and this action failed.

Why sometimes the login is successful and some others not? I guess it is not a matter of username/password but the server reaches the maximum allowed simultaneously mysql connections. If this is the problem your server administrator should rise up the maximum mysql connections number.

I am moving this topic to category "database" as it has nothing to do with security.

Title: Re: Something or somebody changes mySQL password
Post by: StefanSultanov on June 27, 2009, 10:31:37

Thank you people!
You are great as always!

But as I continued to work I noticed that the password changes every time I Save the site's Global Configurations.

Than I went to see my configuration.php and noticed that Firefox filling the passwords for me.  ;D

Sorry for making noise about such dumbass thing, but I guess that this problem of mine could help other users.

I considered this topic solved an want to thank all of the Elxis community for being helpful as always!

 8) By the way - The new 2009 Pandora ROCKS!  8)

Title: Re: Something or somebody changes mySQL password
Post by: datahell on June 27, 2009, 11:27:55

When a form (any form) contains a password field Firefox prompts you if you wish to save the password.
You should select to never save passwords.

Title: Re: Something or somebody changes mySQL password
Post by: rentasite on June 27, 2009, 14:04:13

i had the same issue some time ago, and it was driving me crazy  ;D  and of course it was caused because i had set Firefox to remember that particular site's password.

With a result the Database password changing and saved differently through Global Configuration, with a result Confiuration.php to be wrong  ::)  and the same problems mentioned above.

Title: Re: Something or somebody changes mySQL password
Post by: jimmyz on June 27, 2009, 14:47:16

Fireflox... pf!  :P

Quote

(using password: YES)

This YES means, yes, I (php) used a password while trying to connect to db. Cheers!

Title: Re: Something or somebody changes mySQL password
Post by: webgift on June 27, 2009, 17:44:36

Quote from: datahell on June 27, 2009, 11:27:55

When a form (any form) contains a password field Firefox prompts you if you wish to save the password.
You should select to never save passwords.

I had the same problem ... I fount it immediately !  ;D

Title: Re: Something or somebody changes mySQL password
Post by: oisy on April 25, 2010, 21:29:42

Just ask did the configuration file is unwritable after installing, without changing anything?

Title: Re: Something or somebody changes mySQL password
Post by: StefanSultanov on April 25, 2010, 23:54:13

By default It is Writable.
You Should always set it un-writable after configuration.

Title: Re: Something or somebody changes mySQL password
Post by: rentasite on April 26, 2010, 13:04:23

Quote from: oisy on April 25, 2010, 21:29:42

Just ask did the configuration file is unwritable after installing, without changing anything?

When you start Elxis installation process, Configuration.php is required to be writable (666).

_{If you select to use FTP through the administration panel, it will be more easier for you to make this file writable or not.}