Just fired my overseas worker. Should I change wordpress database password?

Posted: 12 years ago 17 replies

OFFLINE MARKETING

He has database name, username, and password for a Wordpress website. Is this a security risk? Can he do something to the database or site?

#change #database #fired #overseas #password #wordpress #worker

PBScott

PBScott

PBScott

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Originally Posted by sitekrafters

He has database name, username, and password for a Wordpress website. Is this a security risk? Can he do something to the database or site?

Always error on the side of safety.
- [ 0 ] Thank this user
- 1 reply
Signature

If you don't look at this => Really Funny Shirts <= you missed something in life
- sitekrafters
  
  sitekrafters
  
  sitekrafters
  
  Posts: Threads: Thanks: Account age: less than a second
  
  12 years ago
  
  Originally Posted by PBScott
  
  Always error on the side of safety.
  
  Thanks but is it really necessary in these cases? I know nothing about Wordpress databases. He doesn't have access to the site nor access to FTP. He just has the database access information. He's not an honest guy. That's why I fired him in first place.
  
  [ 0 ] Thank this user
  
  1 reply
  
  intellg
  
  intellg
  
  intellg
  
  Posts: Threads: Thanks: Account age: less than a second
  
  12 years ago
  
  Hi sitekrafters,
  
  I have many wordpress website running over web. But I do not think that anybody can harm your website from username, password and database name. He can't do anything until he has ftp and admin panel details.
  
  Thanks
  
  [ 0 ] Thank this user
cypherslock

cypherslock

cypherslock

Posts: Threads: Thanks: Account age: less than a second

12 years ago

You can always delete the specific user from the database (as well as from the admin panel).
- [ 0 ] Thank this user
PerformanceMan

PerformanceMan

PerformanceMan

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Originally Posted by sitekrafters

He has database name, username, and password for a Wordpress website. Is this a security risk? Can he do something to the database or site?

Yes - obviously. Get on with it.
- [ 0 ] Thank this user
Signature

Free Special Report on Mindset - Level Up with Positive Thinking
Steven Saczkowski

Steven Saczkowski

Steven Saczkowski

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Ummm... yeah?
- [ 0 ] Thank this user

12 years ago

Yes, and delete his username.

Even if his access level is low, he can still mess with things...and just might, out of spite.

[ 0 ] Thank this user
1 reply

Signature

>> How To Grow Your Online Business [FREE Training Video, No Opt-In, from 12+ Year Vet]

>> For Agency Founders: The Fast Shortcut To Selling SEO, Leadgen, Webdesign & Other Services

12 years ago

Originally Posted by intellg

Hi sitekrafters,

I have many wordpress website running over web. But I do not think that anybody can harm your website from username, password and database name. He can't do anything until he has ftp and admin panel details.

Thanks

Really? It takes 30 seconds to destroy you then. Most WP sites can be hacked in a matter of minutes anyway.

[ 0 ] Thank this user
1 reply

Signature

The Best Damn Marketing and Local SEO Blog

Ultimate Blueprint To Start Your Own Agency | Get Clients Without Cold Calling

BamIPD

BamIPD

BamIPD

Posts: Threads: Thanks: Account age: less than a second

12 years ago

You should have changed everything 3 hours before firing them.
- [ 0 ] Thank this user
- 1 reply
- TheCG
  
  TheCG
  
  TheCG
  
  Posts: Threads: Thanks: Account age: less than a second
  
  12 years ago
  
  Originally Posted by BamIPD
  
  You should have changed everything 3 hours before firing them.
  
  Amen to that.
  
  Hopefully HE hasn't changed everything by now where YOU can't get in.
  
  [ 0 ] Thank this user
  
  Signature
  
  Yes, by the way, I AM in the Witness Protection Program. I could tell you who I am but then I would have to kill you.

eClicker

eClicker

eClicker

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Yes please. You never know how someone will react after being terminated. Also you don't know what their associates will talk them into. I have tried to hire VAs in the past and have even forwarded some of them accounts with passwords. I never changed the information , they were not core to my business and nothing ever happened but you need to protect yourself.
- [ 0 ] Thank this user
- 1 reply
- sitekrafters
  
  sitekrafters
  
  sitekrafters
  
  Posts: Threads: Thanks: Account age: less than a second
  
  12 years ago
  
  He only has the database info. I changed all wordpress passwords before firing him.
  
  [ 0 ] Thank this user
  
  1 reply
  
  Joel Young
  
  Joel Young
  
  Joel Young
  
  Posts: Threads: Thanks: Account age: less than a second
  
  12 years ago
  
  Originally Posted by sitekrafters
  
  He only has the database info. I changed all wordpress passwords before firing him.
  
  Change everything that has anything to do with his connection your site. Period. Never take chances in these situations. A disgruntled worker can and will find a way to sneak in a gun.....
  
  [ 0 ] Thank this user
BoJoFitz

BoJoFitz

BoJoFitz

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Originally Posted by sitekrafters

He has database name, username, and password for a Wordpress website. Is this a security risk? Can he do something to the database or site?

I'd be concerned enough to change the access information ...
- [ 0 ] Thank this user
Paul Moss

Paul Moss

Paul Moss

Posts: Threads: Thanks: Account age: less than a second

12 years ago

If the Database has been setup to accept remote connectivity, then he can gain access using the credentials he has. If not, i.e localhost only then there isn't much he can do at this point.

I would change the passwords just for piece of mind. However, I'd be more concerned in the event he made a backdoor to your system.

I knew someone who hired and then fired someone in overseas. The remote guy then wiped everything clean from the server using an unknown superuser account.
- [ 0 ] Thank this user
Andrew H

Andrew H

Andrew H

Posts: Threads: Thanks: Account age: less than a second

12 years ago

He's not an honest guy. That's why I fired him in first place.

For the sake of my curiosity can you please explain the scenario?
- [ 0 ] Thank this user
Signature

"You shouldn't come here and set yourself up as the resident wizard of oz."
euraffiliates

euraffiliates

euraffiliates

Posts: Threads: Thanks: Account age: less than a second

12 years ago

Originally Posted by sitekrafters

He has database name, username, and password for a Wordpress website. Is this a security risk? Can he do something to the database or site?

Normally ethical developer do not harm. At least I have not done in my 13 years of web experience, although some people did not make the final payment after I delivered the project.

If you have doubts on his ethics, first change FTP password. Change database password too because he can have full control on database if he has access to phpMyAdmin (that does not require basic auth) or a similar script in the server.

Thanks
- [ 0 ] Thank this user
Signature
Euraff - Next-G Affiliate Software. With all advanced tools. Know Source and Keyword behind every Non Affiliate Sale and Lead too. Automate 'Revenue Sharing Deals' with your Suppliers and JV partners. Special Edition for Multiple Website Owners. 30 days Free Trial!

Just fired my overseas worker. Should I change wordpress database password?

Trending Topics

Hello all o/

Is DL Guard still available to buy?

How to host LinkedIn live events

Hello everyone! I'm new here and excited to learn and share. Looking forward to your support!

Who is your favorite video game character?

Bouncer - Powerful and secure email verification platform