Req #81023 [NEW]: Limit usable usernames for MySQLi
| From: | nene at wo dot cz | Date: | Sun, 09 May 2021 16:20:04 +0000 |
| Subject: | Req #81023 [NEW]: Limit usable usernames for MySQLi | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-233753@lists.php.net to get a copy of this message | ||
From: nene at wo dot cz
Operating system: Linux
PHP version: Next Major Version
Package: MySQLi related
Bug Type: Feature/Change Request
Bug description:Limit usable usernames for MySQLi
Description:
------------
Hello,
utilizing one LAMP server for multiple webs and/or domains is quite
common now. It would be great to limit the usernames which can be used
to connect to MySQL database from PHP per Apache virtual and/or
PHP-fpm.
For example - there is one shared MySQL server for all webs. In the
configuration of each web can be list of acceptable usernames to access
the database. For example as php_admin_value='user1' in apache virtual.
In a case that this virtual invoke in PHP mysqli_connect with different
username than 'user1', this will be prohibited.
This can improve the security of shared web server services, because one
web cannot make brute force password attack to databases of other webs.
BR,
Zdenek
--
Edit bug report at https://bugs.php.net/bug.php?id=81023&edit=1
--
Fix committed: https://bugs.php.net/fix.php?id=81023&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=81023&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=81023&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=81023&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=81023&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=81023&r=support
Expected behavior: https://bugs.php.net/fix.php?id=81023&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=81023&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=81023&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=81023&r=globals
PHP version support discontinued: https://bugs.php.net/fix.php?id=81023&r=phptooold
Daylight Savings: https://bugs.php.net/fix.php?id=81023&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=81023&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=81023&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=81023&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=81023&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=81023&r=mysqlcfg