We have an information portal that is setup on an ancient ColdFusion page, and it's backed by a MySQL database. All that works fine. I discovered that by just entering the hostname (mysql21.hostingcompany.com) and creating a database user, I was able to use the mysql client over the internet directly.
Maybe I'm paranoid, but usually I limit TCP/IP database access to be behind a firewall and only from trusted hosts. Am I overly cautious, or is this webhost just kind of lax on the firewall rules?
At the end of the day I doubt we'd drop them over something like this, the info that's stored here is super trivial, and we're looking at costs of like $19/month which is less than the coffee budget for the 3-person tech support group. I was just curious to know others' experience, because this is the only web hosting company I have out there right now.
Maybe I'm paranoid, but usually I limit TCP/IP database access to be behind a firewall and only from trusted hosts. Am I overly cautious, or is this webhost just kind of lax on the firewall rules?
At the end of the day I doubt we'd drop them over something like this, the info that's stored here is super trivial, and we're looking at costs of like $19/month which is less than the coffee budget for the 3-person tech support group. I was just curious to know others' experience, because this is the only web hosting company I have out there right now.