Settings.php change by itself

[Jorkki]

Hi!
I have very strange problem. MySQL-settings in settings.php change by itself (maybe a security hole?).  

My forum works good few days, but suddenly forum gives MySQL-errors and when I look settings.php, it looks like this:
$db_name = "localhost";
$db_user = "localhost";
$db_passwd = "localhost";
$db_server = "localhost";

Problem go away, when I fix settings.php, but something is wrong.
This problem happen again continuously.

My forum version is 1.4 and I have use YaBB SE forum about six months and last week is first time when I have this problem.

[andrea]

How is the modification date of Settings.php when the values are set to "localhost"?

Case somebody hacks you, you can try to
chmod 600 Settings.php

Case telnet connections are allowed, this setting would prevent other users sitting on the same server from editing your Settings.php.

The board should work fine with that, as long as you do not try to access the admin menu. I tested this some times ago with an older YaBB SE release, but I suppose it is also working with version 1.4

[Jorkki]

How is the modification date of Settings.php when the values are set to "localhost"?

Case somebody hacks you, you can try to
chmod 600 Settings.php

I can't now check how the modification date is, because i delete that maybe hacked file.

If I chmodded Settings.php 600, YaBB gives some errors.

[David]

600  only works if the file is owned by the webserver which most of the time it is not.

[Jorkki]

It's happen again.
I just chmodded Settings.php 444. Maybe that helps..

 

[andrea]

You could also try "400", could work too.