Help Me please My server unsecure

[atossuper]

Hello everybody, i want to know if someone know my server ip and database information username and password he can modify anything without login at my server? i mean editing the database
answer me fast please.thanks

[MentaL]

[Caosfox]

yes they can edit your db

[atossuper]

yes they can edit your db

Thanks Caosfox for answer me , do you know how they can edit it? with program? or with what?

[Caosfox]

1) change sql id/pass (and use comles id/password... and ofc NEVER SHARE IT)
2) use sql only on local mode ( block incoming connections on sql port - 1433)
3) secure your php scripts (no idea how.. i dont know php)