#32988 [Opn->Fbk]: ext/oci8: OCI doesn't support DB external authentication

ID: 32988 Updated by: wez@php.net Reported By: stephane dot dekeyzer at kmi dot be -Status: Open +Status: Feedback Bug Type: Feature/Change Request Operating System: Any PHP Version: 5.0.4 New Comment: Please post your patch online somewhere as a unified diff against CVS HEAD, and paste the link to that diff into this bug report; thanks :) Previous Comments: ------------------------------------------------------------------------ [2005-05-09 17:00:26] stephane dot dekeyzer at kmi dot be Description: ------------ OCILogon, OCIPLogon, doesn't support external authentication to the database ... I know this a ecurity hole if you use php with apache, but when you use it in scripting mode, it is very usefull, and itsn't a security breach. I met Christopher Jones last week at the PHP conference in Amsterdam who agreed and asked me to post this bug so OCI developpers can discuss about it. It would a be a good idea when php runs without apache, external authentication would be allowed. I have a modification of the oci8.c wich support external authentication, just mail me if you want to have it ! Reproduce code: --------------- $conn = OCILogon("", "", mydb); // should work $conn = OCILogon("/", "", mydb); // should also work $conn = OCILogon(null, null, mydb); // should also work Expected result: ---------------- $conn = OCILogon(null, null, mydb); // should work and log me in as the os user curently running the script Actual result: -------------- $conn = OCILogon(null, null, mydb); // gives an error. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=32988&edit=1