MongoDB 没设置密码，还真会被比特币勒索

[picone]

某项目，测试环境偷懒没设置密码，为了方便本地调试也开了外网访问端口。。

结果，今天一上班，杯具了。。2333

数据库全部清空了，只剩一个 Warning 的数据库：

里面有个 Readme 的 Collection，只有这样一条记录

{
    "_id": "5a199385e2d806f3814a7dbf",
    "BitCoin": "1EPA6qXtthvmp5kU82q8zTNkFfvUknsShS",
    "eMail": "[e-mail]",
    "Exchange": "https://localbitcoins.com",
    "Solution": "Your DataBase is downloaded and backed up on our secured servers. To recover your lost data: Send 0.2 BTC to our BitCoin Address and Contact us by eMail with your MongoDB server IP Address and a Proof of Payment. Any eMail without your MongoDB server IP Address and a Proof of Payment together will be ignored. You are welcome!"
}

幸好数据能从生产拉回来。。。真不敢偷懒了。

[wsy2220]

``幸好数据能从生产拉回来``

测试库里面放生产数据？还对外开放？

[picone]

@wsy2220 #1 是吧，只是项目模板数据，不是用户数据，所以没啥关系。不过以后还是加个密码比较好