Potential leak of data: MySQL Access Control
Detected 2 occurrence(s) of ‘create user .* identified by’:
d one for local user. if we don't specify the local one,
// the anonymous user would take precedence when there is one.
$query = "CREATE USER '$name'@'localhost' IDENTIFIED BY '$password'";
$result = mysql_query($query, $connection);
$query = "CREATE USER '$name'@'%' IDENTIFIED BY '$password'";
$result = mysql_query($query, $connection);
}
public static function pg_createDatabase($name,$user,$connection) {
//we cant use OC_BD functions here because we need to connect as the administrative user.
$e_name = pg_escape_st
Source: http://pastebin.com/raw.php?i=G3j9uHWD
Tags: MySQL Access Control, pastebin.com
This entry was posted on Friday, June 29th, 2012 at 20:40 and is filed under PasteMon. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.
Comments are closed.

