Bug #2324: pg_connect connects as web server, not script owner
| From: | mpg4 at duluoz dot net | Date: | Sun, 19 Sep 1999 00:38:09 +0000 |
| Subject: | Bug #2324: pg_connect connects as web server, not script owner | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-11066@lists.php.net to get a copy of this message | ||
From: mpg4@duluoz.net
Operating system: Linux 2.0.36
PHP version: 3.0.12
PHP Bug Type: PostgreSQL related
Bug description: pg_connect connects as web server, not script owner
The PostgreSQL functions are run as the web server user, not as the owner of the script that called
them. This means that any user can view the contents of any database that the web server can see.