with debug on, and there is an error with db connection, it will show db login credentials (this is changed in latest versions), so they probably accessed the db itself, is the user allowed for all hosts on the db or just local?
-- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php
