Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Customers can create databases from the customer admin sql user #1286

Open
Raraph84 opened this issue Oct 14, 2024 · 0 comments
Open

Customers can create databases from the customer admin sql user #1286

Raraph84 opened this issue Oct 14, 2024 · 0 comments
Assignees
@d00p
Milestone
2.2.x

Comments

@Raraph84
Copy link

Raraph84 commented Oct 14, 2024 •
edited
Loading

Describe the bug
Customers can create databases from the customer "admin" sql user, regardless the allowed databases count of the customer, with a direct connection to the sql server or from phpmyadmin

System information

  • Froxlor version: 2.2.4
  • Web server: apache2
  • OS/Version: Debian 12 Bookworm
  • Database: MariaDB 10.11.6-MariaDB-0+deb12u1

To Reproduce
Steps to reproduce the behavior:

  1. Create a customer
  2. Connect to the database (with phpmyadmin for example), with the customer "admin" sql user
  3. Try creating databases with names starting by the username of the customer
  4. The database is created
@d00p d00p self-assigned this Oct 14, 2024
@d00p d00p added this to 2.2 Oct 14, 2024
@github-project-automation github-project-automation bot moved this to To do in 2.2 Oct 14, 2024
@d00p d00p added this to the 2.2.x milestone Oct 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@d00p d00p

Labels
None yet
Projects
2.2
Status: To do
Milestone
2.2.x
Development

No branches or pull requests
2 participants
@d00p @Raraph84