Req #81023 [NEW]: Limit usable usernames for MySQLi

From: Date: Sun, 09 May 2021 16:20:04 +0000
Subject: Req #81023 [NEW]: Limit usable usernames for MySQLi
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-233753@lists.php.net to get a copy of this message
From: nene at wo dot cz Operating system: Linux PHP version: Next Major Version Package: MySQLi related Bug Type: Feature/Change Request Bug description:Limit usable usernames for MySQLi Description: ------------ Hello, utilizing one LAMP server for multiple webs and/or domains is quite common now. It would be great to limit the usernames which can be used to connect to MySQL database from PHP per Apache virtual and/or PHP-fpm. For example - there is one shared MySQL server for all webs. In the configuration of each web can be list of acceptable usernames to access the database. For example as php_admin_value='user1' in apache virtual. In a case that this virtual invoke in PHP mysqli_connect with different username than 'user1', this will be prohibited. This can improve the security of shared web server services, because one web cannot make brute force password attack to databases of other webs. BR, Zdenek -- Edit bug report at https://bugs.php.net/bug.php?id=81023&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=81023&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=81023&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=81023&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=81023&r=needscript Try newer version: https://bugs.php.net/fix.php?id=81023&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=81023&r=support Expected behavior: https://bugs.php.net/fix.php?id=81023&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=81023&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=81023&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=81023&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=81023&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=81023&r=dst IIS Stability: https://bugs.php.net/fix.php?id=81023&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=81023&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=81023&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=81023&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=81023&r=mysqlcfg

« previous php.bugs (#233753) next »