I am upgrading a board that might be compromised by rogue ex-administrators. The board has been in versions as low as 5.x.x recently


What are the safety hazards?

* server password, of course

* database password, of course (probably several passwords, the ubb database password but also general mysql passwords). Any instructions for dummies how to change all these passwords without having to spend days on basic mysql manuals?

* external access to database. Please dummy instructions how to stop external access to the database, which in the past I allowed. Right now I need only access to the database from my server. note the database right now is NOT on my server but on the hoster's database server on the same network.

Thank you very much for your patience



* Old passwords of old admins and moderators?

* any "trojans" an old admin could have planted into the database?

I understand all passwords have to be changed at the same time. Please advise!!




Oh, one more point.

I might want to take over a complete board database from one of these rogue administrators, that ran on his server. Any way to make that secure or could he have planted anything he wanted into that database??