Have You Really Secured Your Hosting Server

some hostings around WHT have a small "feature" enabled on all shared or reseller servers. This feature allows read/write on local files. Php safe mode or open_basedir won't help here

CREATE TABLE data (text LONGTEXT);
LOAD DATA LOCAL INFILE '/etc/named.conf' INTO TABLE data;
This SQL query allows me to load local 'named.conf' to mysql database.

Code:
SELECT text FROM data INTO OUTFILE '/etc/file';
This SQL query allow me to write data from mysql to local file.

Last year I bought some shared and reseller packages, it worked 100%. None from 17 providers have disabled it. Also some of them are well known and big.

I've wrote emails to them, reported this "feature", hope they have disabled it ;-).

To disable add to my.cnf file :

Code:
[mysqld]
local-infile=0