Something or somebody changes mySQL password

[StefanSultanov]

Hello!

The site password constantly changes to "YES".

First it happened to www.lechebnizavedenia.com - Elxis 2008.0 Nemesis
Now it is happening with a second site I'm building - Elxis 2009.0 Pandora

Any Ideas?  Could it be happening during server interaction? 

[ks-net]

site or mysql password?

both are strange... and first time hear about this..... 

check your server .. ask server administrator... who else have access?

[jimmyz]

In file configuration.php, line 10 $mosConfig_user = 'username'; and line11 $mosConfig_password = 'xxx'; lays the username and pass for accessing the mysql database.

In database table elx_users, you can see the "Super Administrator's" md5 hash of the password used to access administration panel, under "id" 62.

[StefanSultanov]

Yes I asked.

First with the Nemesis it was easy cause I made the configuration.php - unwritable.
But with the Pandora it is even stranger because the hosting package doesn't utilise a domain name i. e. no one knows it and no one except me has access officialy.

There has been only 5 minutes since I finished installation and ZAP! Same thing. The bad news is that I didn't see the password for the Data Base to change in the new version's configuration.php.

So I will have to reupload and install. I will be glad to give you the address if it happens again.

Thanks

[StefanSultanov]

Hey, I'm back again!

Check this out
PHP Error [Warning]
URI: index2.php?mosmsg=The+configuration+details+have+been+updated%21
Path: /includes/adodb/drivers/adodb-mysql.inc.php
Line: 382
mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)
mysql Error [1045] : PCONNECT
URI: index2.php?mosmsg=The+configuration+details+have+been+updated%21
Message: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)
localhost
alphab7csd

[ks-net]

i have replied to your PM... you cant connect to DB because of wrong pass or username.... your pass didn't changed to YES or something else

EDit.. just remember this
MKjys78vgRpwek  this username is too long .... there is a case that long usernames and DB names are produces errors (mysql relative problems )

try to use a DB username  and name with about 7 chars .. no more

[datahell]

mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'MKjys78vgRpwek'@'localhost' (using password: YES)

This does not means that your password changed to "YES". This means that user "MKjys78vgRpwek" tried to connect to the database using his password and this action failed.

Why sometimes the login is successful and some others not? I guess it is not a matter of username/password but the server reaches the maximum allowed simultaneously mysql connections. If this is the problem your server administrator should rise up the maximum mysql connections number.

I am moving this topic to category "database" as it has nothing to do with security.

[StefanSultanov]

Thank you people!
You are great as always!

But as I continued to work I noticed that the password changes every time I Save the site's Global Configurations.

Than I went to see my configuration.php and noticed that Firefox filling the passwords for me. 

Sorry for making noise about such dumbass thing, but I guess that this problem of mine could help other users.

I considered this topic solved an want to thank all of the Elxis community for being helpful as always!

  By the way - The new 2009 Pandora ROCKS! 

[datahell]

When a form (any form) contains a password field Firefox prompts you if you wish to save the password.
You should select to never save passwords.

[rentasite]

i had the same issue some time ago, and it was driving me crazy    and of course it was caused because i had set Firefox to remember that particular site's password.

With a result the Database password changing and saved differently through Global Configuration, with a result Confiuration.php to be wrong    and the same problems mentioned above.

[jimmyz]

Fireflox... pf! 

(using password: YES)

This YES means, yes, I (php) used a password while trying to connect to db. Cheers!

[webgift]

When a form (any form) contains a password field Firefox prompts you if you wish to save the password.
You should select to never save passwords.

I had the same problem ... I fount it immediately ! 

[oisy]

Just ask did the configuration file is unwritable after installing, without changing anything?

[StefanSultanov]

By default It is Writable.
You Should always set it un-writable after configuration.

[rentasite]

Just ask did the configuration file is unwritable after installing, without changing anything?

When you start Elxis installation process, Configuration.php is required to be writable (666).

_{If you select to use FTP through the administration panel, it will be more easier for you to make this file writable or not.}