Hosting Company and Remote SQL Access

Do you have an idea the percentage of hosting companies offering "remote SQL access" ?
I'm haunted by the idea of trying to sell some remote services for zencart stores that requires remote access to databases .

solo_400:

Do you have an idea the percentage of hosting companies offering "remote SQL access" ?
I'm haunted by the idea of trying to sell some remote services for zencart stores that requires remote access to databases .

Percentage? no

But - most Linux hosts with cPanel have this facility

Well you can count out anyone who uses GoDaddy or their affiliates as potential clients for your services.. GoDaddy shutdown their remote SQL accesses a long time ago..

DivaVocals:

Well you can count out anyone who uses GoDaddy or their affiliates as potential clients for your services.. GoDaddy shutdown their remote SQL accesses a long time ago..

It seems still possible :
http://support.godaddy.com/help/article/4978/connecting-remotely-to-shared-hosting-databases

DivaVocals:

Well you can count out anyone who uses GoDaddy or their affiliates as potential clients for your services.. GoDaddy shutdown their remote SQL accesses a long time ago..

Good one Diva! :lol:

frank18:

But - most Linux hosts with cPanel have this facility

Although it is true that most Linux hosts with cPanel will show this as an option. In many cases, when you click the icon you'll be created with a pop-up saying the feature has been disabled.

It rather sad really because there really isn't any need for such restrictions, but a few/many years ago there were some serious vulnerabilities with the MSsql server (MicroSoft) and the 'cure' was to block remote access. Although the vulnerbilities have long been fixed (and was never an issue for MySQL) a lot of Network admins still perceive it as a security risk and no amount of logical arguments or facts can convince them otherwise. :(

I can't give percentages, but I've found that there seem to be more hosts that deny this than there are that allow it.

Cheers
Rod

solo_400:

It seems still possible :
http://support.godaddy.com/help/article/4978/connecting-remotely-to-shared-hosting-databases
ahhh.. Well that's very new (I see the article is dated 2013)... but here's the GoDaddy caveat: > To connect remotely to a database, you must create a database and enable direct database access. If a database was created without this option selected, you will not be able to connect remotely.

I just started with a new client who unfortunately is hosted with GoDaddy.. So based on this, in order for me to have remote access to his database, I would have to create a new database, restore his current data to the new database, then update his WordPress and Zen Cart configuration files to point to the new database.. It's not hard work, but it will cost him money for my time to do it..

I don't have to do this for any of my client's who hosting offers remote SQL out the box..

RodG:

Although it is true that most Linux hosts with cPanel will show this as an option. In many cases, when you click the icon you'll be created with a pop-up saying the feature has been disabled.

It rather sad really because there really isn't any need for such restrictions, but a few/many years ago there were some serious vulnerabilities with the MSsql server (MicroSoft) and the 'cure' was to block remote access. Although the vulnerbilities have long been fixed (and was never an issue for MySQL) a lot of Network admins still perceive it as a security risk and no amount of logical arguments or facts can convince them otherwise. :(

I can't give percentages, but I've found that there seem to be more hosts that deny this than there are that allow it.

Cheers
Rod
the clients I have whose hosts allow it require you to add your IP address to a whitelist before you can remote access.. Some hosts make this whitelisting process easier than others..

DivaVocals:

the clients I have whose hosts allow it require you to add your IP address to a whitelist before you can remote access.

Yeah. That's pretty much the way the cPanel module works (when enabled). I tend to whitelist '%', mainly because my home computer is on a dynamic IP, and that's where I do a lot of my access from.

I'm not sure I'd recommend this for everyone though. I tend to keep quite a close eye on the log files. If I didn't do this I'd probably consider the risks a little too great.

Cheers
Rod

Just a side note involving PCI. Many of the :censored: who "manage" PCI compliance for the merchant accounts will NOT certify PCI compliance unless the remote access is disabled.

Well , it seems I could never sell my remote services which are based on remote sql access :-)

solo_400:

Well , it seems I could never sell my remote services which are based on remote sql access :-)

Pretty much..