title: MySql Database Hacked, NOT injections
body: <p>Three weeks ago, I found a list of my website's users and info on Paste Bin giving away all privacy. I ran updates and protected against SQL Injections. I also added a pre-request to save the SQL in text format in a LOG table whenever user input is required to be able to analyse any injection if my protection wasn't enough.</p>
  
  <p>Then today the same post was on Paste Bin again with recent entries so I checked the LOG table to find only clean entries. Is there anything else than injections I should worry about? The web seems to give info about Injections only!</p>
  
  <p>Could they have had access to the dbpassword in a php file on the server and could they have connected from and external server?</p>
  
  <p>Should I change the dbpassword frequently?</p>
  
  <p>Are there any solution non-script wise like hosting security plan or something like that which should be efficient enough?</p>
  
  <p>I am receiving physical threats from hacked users and would really like to close this quickly...</p>