Some time ago, we had a website, and the web and database were separated. It's always wrong. akens prompts that it's done now.
Now let's talk about the following ideas:
Websites that are engaged in database and web separation generally start from the background. The backend of my website may be restricted by ip addresses, so this cannot be achieved.
There is no way to bypass and find that phpminiadmin is installed on one site. The address is xxx.com/mysql.php, and the account number and password are entered to the Data Warehouse IP address. The mysqlaccount number and password have been cracked. Is do not know the database ip is how much, and then prompted to read etc/sysconfig/network-scripts/ifcfg-eth1, there is an IPADDR = x. x fill in the ip address can be
I also read this ip address. However, this ip address is an intranet ip address and has never been tried.
In addition, let's send some paths to read linux sensitive data.
/Usr/local/app/apache2/conf/httpd. conf
/Usr/local/app/php5/lib/php. ini
/Etc/httpd/conf/httpd. conf
/Usr/local/Zend/etc/php. ini
/Usr/local/app/apache2/conf/extra/httpd-vhosts.conf
/Etc/sysconfig/iptables
/Etc/sysconfig/iptables-config
/Etc/sysconfig/network-scripts/ifcfg-eth0
/Etc/hosts,/etc/sysconfig/i18n