note 21004 added to function.mysql-connect
| From: | mdpaez70 at hotmail dot com | Date: | Thu, 25 Apr 2002 03:20:20 +0000 |
| Subject: | note 21004 added to function.mysql-connect | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-29819@lists.php.net to get a copy of this message | ||
Ok...really quick security problem and hopefully equally quick solution. I can connect to mysql
database leaving the root, username and password empty. I just realized this while fudging the
password on purpose. I'm even able to insert records into the db.
$dbcnx=@mysql_connect("", "", "");
Am I missing an important configuration in either php or mysql?
--
http://www.php.net/manual/en/function.mysql-connect.php
http://master.php.net/manage/user-notes.php?action=edit+21004
http://master.php.net/manage/user-notes.php?action=delete+21004
http://master.php.net/manage/user-notes.php?action=reject+21004