HUGE cPanel problem

[osirion]

I recommend HG reports this.

Ive noticed this before, but now its for certain. I just finished creating a new user with the username (for the purpose of this notice, this is changed) "candyfloss". "candyfloss" is a very common username, or at least, a common prefix.

Upon opening the MySQL database management screen, everything is clean.
But should I open up phpMyAdmin - low and behold, there is a database there (even though the previous screen says its clean).
Some of you might be thinking, so what? just delete it? I guess I could using the "SQL textbox command prompt" - but thats not the problem.

I can now browse all the databases from the previous account without a problem. For some reason, the databases seem to be "cleared" from the "cPanel" records - however, they are not physically removed from MySQL itself.
This isn't very good because looking through previous databases, confidential information could get leaked. I of course am going to attempt to remove this db - but I think HG should report this as a major bug.

Im not thinking clearly right now, so if I didnt make much sense - I apologise :P

[MachineDog]

That made perfect sense. I wonder what could be causing this, normally things are deleted. D:

[hotdog]

When I log into phpmyadmin I now have to select a database, it now displays what I believe to be ALL the databases on my server, can't view the contents as they all have (-) as table fields, but clicking on them gives you the option of adding a table. I'm not going to do it incase it is someones database.
Interesting and scary at the same time, phpbb and mambo are very popular as is wordpress, hmm interesting, it also shows the mail, horde and mysql tables.

879 tables *no I didn't count them, used copy and paste and let the text editor shoe me *

As osirion is a reseller and I am on shared it's different problem but could be wide spread as it's similar fault

[Danny Carlton]

Aren't the databases limited to specific users? That's the purpose of the cPanel section which allows you to designate which users have access to the database, and what kind of access. I have an online Bible script (http://phpBible.org) that uses a MySQL datbase. I have incorporated the script on more than one site, at different accounts, but by specifying the username in password in the script for the other accounts, they can access the same database, since all the accounts are on the same server (for example http://bythefireplace.com/thebible/index.php which is a separate account, but uses the same database) That's handy since the database takes over 12 meg of disk space. But for anyone else on the volvo server to use it, they would need the correct username and password.

As an aside, I've been tempted to see if I could make the online Bible package an installable feature like something on Fanstastico. The database would only need to be installed once on each server (I assume it couldn't be accessed from another server, but I could be wrong)

[MachineDog]

Yes, yes. I think I read somewhere where this is actually a problem when updating MySQL.