GoDaddy SQL question

[Marauder2003]

My database apparently got moved to a new shared server. Today I connected to the server with SSMS 19.3 on my local PC.

I was shocked to see all the databases on the server in addition to my database. I can?t read them but to my thinking I should not even know they exist. Before the move the server name I used had identifying info unique to me so the address must have been an alias to the shared server in use. But I only saw my database listed.


To me this seems to be a small security lapse.

[arrix]

If you can see them, others can see yours too. Pretty large security hole there.

[Marauder2003]

I can?t view the content of the other DB. I just don?t like that I can see they exist. I know security by obscurity is not good but it helps.

I have complained to GoDaddy. Don?t expect much to change.

If you can see them, others can see yours too. Pretty large security hole there.

[arrix]

Try creating a SQL user on your db with elevated privileges and see if that account can add the other dbs as linked dbs, then try to query the other db's information_schema view to see their structures.