« previous next »
Pages: [1]

Author Topic: mySQL user  (Read 214 times)

0 Members and 1 Guest are viewing this topic.

Offline
anandmys
**
mySQL user
« on: April 04, 2025, 11:15:57 AM »
Hi

When i login to phpmyadmin using any user, I am able to see all databases, tables and data of other users as well.

What might be wrong?
Logged
Offline
cyberspace
***
Re: mySQL user
« Reply #1 on: April 04, 2025, 04:15:40 PM »
Hi,

It could happen if you accessed phpMyAdmin as "root" then opened the user level control panel and opened phpMyAdmin.

Log out from phpMyAdmin (it isn't enough to just close the phpmyadmin in the browser) and then try to access phpmyadmin as a regular user.
Logged
Offline
anandmys
**
Re: mySQL user
« Reply #2 on: April 05, 2025, 11:58:12 AM »
Did that. Even used a different browser.
Logged
Offline
overseer
*****
Re: mySQL user
« Reply #3 on: April 05, 2025, 03:31:50 PM »
Definitely not how my server behaves. I login to the /pma link as a user account with their password and I can only see the DB that the user owns, not the extent of the full server-wide DB.

When under a user control panel, you go to the Databases > phpMyAdmin link:
https://yourserver.tld:2083/cwp_SESSIONID/username/?module=pma
should forward you to:
https://yourserver.tld:2087/pma/index.php?route=/&route=%2F

Is that what you see happening? And what if you directly load PMA?
https://yourserver.tld:2087/pma/
Do you get a login screen where you can login as a user?
Logged
Offline
anandmys
**
Re: mySQL user
« Reply #4 on: April 12, 2025, 08:05:00 AM »
Yes. This is happening as you mentioned.

But when I login with a db user at https://yourserver.tld:2087/pma/, I am getting access to all other users DBs


Quote from: overseer on April 05, 2025, 03:31:50 PM
Definitely not how my server behaves. I login to the /pma link as a user account with their password and I can only see the DB that the user owns, not the extent of the full server-wide DB.

When under a user control panel, you go to the Databases > phpMyAdmin link:
https://yourserver.tld:2083/cwp_SESSIONID/username/?module=pma
should forward you to:
https://yourserver.tld:2087/pma/index.php?route=/&route=%2F

Is that what you see happening? And what if you directly load PMA?
https://yourserver.tld:2087/pma/
Do you get a login screen where you can login as a user?
Logged
Offline
anandmys
**
Re: mySQL user
« Reply #5 on: April 17, 2025, 12:29:45 PM »
Got answer from here

https://forum.centos-webpanel.com/centos-webpanel-bugs/users-can-see-all-phpmyadmin-user-database-how-to-prevent-it/msg51069/#msg51069

Deleting user "Any" resolved the issue. Not sure if I have created any other issue due to this.

As of now all good.
Logged
Offline
overseer
*****
Re: mySQL user
« Reply #6 on: April 17, 2025, 12:41:14 PM »
Perhaps that came from a cPanel migration? I don't have an "any" user on any of my servers...
Logged
Offline
anandmys
**
Re: mySQL user
« Reply #7 on: April 17, 2025, 12:51:34 PM »
Quote from: overseer on April 17, 2025, 12:41:14 PM
Perhaps that came from a cPanel migration? I don't have an "any" user on any of my servers...

Surprised to see that

Hope not a malware / hacking issue
Logged
Pages: [1]
« previous next »