They would be able to do this by using a locally or remotely hosted install of phpMyAdmin or similar software. This software allows you to 'browse' your database.
These methods rely on the user name/password for your PMA folder or database being known - unless PMA is incorrectly configured to allow anyone to gain access.
Have you at any point (even if for a short period) had this forum guest enabled?
|