Froxlor
Froxlor copied to clipboard
Customers can create databases from the customer admin sql user
Describe the bug Customers can create databases from the customer "admin" sql user, regardless the allowed databases count of the customer, with a direct connection to the sql server or from phpmyadmin
System information
- Froxlor version: 2.2.4
- Web server: apache2
- OS/Version: Debian 12 Bookworm
- Database: MariaDB 10.11.6-MariaDB-0+deb12u1
To Reproduce Steps to reproduce the behavior:
- Create a customer
- Connect to the database (with phpmyadmin for example), with the customer "admin" sql user
- Try creating databases with names starting by the username of the customer
- The database is created