Joomla w/SMF bridge. Shared vs multiple database security issue (on Dreamhost).

[ActionClaw]

I recently learned that when I installed SMF I should have used the Joomla database rather than creating another.
(Please see: http://www.simplemachines.org/community/index.php?topic=63187.0)

Not yet knowing if it's possible or how to correct this after the fact I figured I should at least try to grant permission to the database users to access each others' databases.
(as described here: http://www.simplemachines.org/community/index.php?topic=134591.0)

Though I didn't know about this at the time, I did know I would be using them together so I initially set them up with the same Username and Password. By doing so, I automatically allowed SMF and Joomla to access each others' databases, correct?


That said, I later read that "There is a security issue with using multiple databases with the bridge on DreamHost.  While it is possible to do, it is not recommended."

Is it possible to correct this (have SMF and Joomla share the same database) after they've both been installed with their own databases (other than uninstalling and reinstalling one of them)?

If so, can you please direct me to info that describes how this should be done.

If not, is this security issue enough of an issue that (if one can't or doesn't want to start over) it would justify using these as is, separately, without the bridge?

Thanks

[mickyd2006]

Hmmm I think you might be in for some fun on this one buddy!
Im with dreamhost myself and run mambo 4.6.1 and SMF 1.1.2 bridged using 1 Database for both softwares.
I have tried changing Database locations and paths before and it didnt fair well! I'm not trying to put you off buddy, but be VERY carefull what you do. First thing I would do is make a backup of you database before making any changes.

Sepperating the databases themselves is relatively easy, just use phpmyadmin and export either just the mos table entries or just the smf table entries or export them both as sepperate exports and you will have 2 coplete database backups one for mos and one for smf.

As for the paths, you had best wait for ortsio before making any major changes as I found out the hard way that the paths feature in all sorts of places and not just in the config files...

Sorry I cannot be of more help but I hope you find out more!!!!!!!

[afonic]

Hi,

imo I think putting both SMF and Joomla data in one database (and using a single user of course) is the easiest way to work with the bridge.

Now, security-wise, having two separate databases and one user that has access in both of them (in order for the bridge to work) shouldn't be less secure than using one database.

You should be fine using both methods, however if as you said you have everything up and running by using a single database and a single user, just leave it as it is.

[Orstio]

On Dreamhost, if you have SMF and Joomla installed on separate databases:  On login the SMF database user switches to the Joomla database, and checks for a user in Joomla.  Even if there is no user in Joomla, the database returns a non-FALSE value, so the bridge assumes a user, and writes it to the SMF database.  This could result in people by-passing the registration system.

So, it is recommended that if you are hosting your site with DreamHost, use only one database.

[ActionClaw]

So, it is recommended that if you are hosting your site with DreamHost, use only one database.

That is what I understood...which takes us back to my original question: Is it possible to correct this (have SMF and Joomla share the same database) after they've both been installed with their own databases or is the only way to uninstall and then reinstall one of them?

[afonic]

Hi,

yes of course. Just extract your SMF database (using phpmyadmin) and import the tables in your Joomla database. Then edit Settings.php in SMF (you can find the same settings in the admin panel) and set them so that SMF uses the new combined database.

[ActionClaw]

If that's all there is to it, that seems easy enough. Thanks.

If one database is larger, has more registered users, etc., are there any advantages or disadvantages to importing the SMF database tables into the Joomla database as opposed to importing the Joomla database tables into the SMF database?

[Neol]

If you decide to import the SMF tables into the Joomla! database, you can use the tool repair_settings, after the import, to correct some of the main SMF settings, including database location.

I don't know of any tool to do that for Joomla.