-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Je Dimanĉo 25 Majo 2003 15:36, Brion Vibber skribis:
Okay: this correctly gives error:
SELECT user_password from user limit 5
but this shows the password and e-mail fields:
SELECT * from user limit 5
Okay, this is a MySQL bug. It's apparently fixed in 4.0.13, here's the
changelog entry:
* Fixed a security problem with SELECT and wildcarded select list,
when user only had partial column SELECT privileges on the table.
I'll install the upgrade, then reenable sql queries if all is well.
- -- brion vibber (brion @
pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE+0VTSxVlOmwh1xjgRAvG9AJ9JL/z/wBRbdTKgSB4AcbMA8Tc2cgCgjx3s
9PquvX075QowuEPrZrVhJ6k=
=ogTu
-----END PGP SIGNATURE-----