Re: patch to restrict database access for ext/pgsql
| From: | Jon Parise | Date: | Thu, 26 Sep 2002 22:36:42 +0000 |
| Subject: | Re: patch to restrict database access for ext/pgsql | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-88656@lists.php.net to get a copy of this message | ||
On Thu, Sep 26, 2002 at 02:15:52PM -0400, Jim Mercer wrote:
> this patch adds the config variable pgsql.allowed_dblist
[snip]
> although it can be accomplished by other means, setting the variable to a
> value of ":" effectively locks the code out of pgsql.
Isn't it generally better (where "better" means more secure,
efficient, and easily maintained) to handle database access control
using PostgreSQL's native access mappings?
--
Jon Parise (jon@php.net) :: The PHP Project (http://www.php.net/)