cpbackup changes MySQL passwords.

Oct 18, 2006
10
0
151
Hi, All!

I have three users who after everyone backup have problems with access to mysql.

Their passwords vary so:

Before: *1172D84CC0CBDF7FD2D9BA2116AFA64CC7656945
After: -5496567CC46AFA6112AB9D2DF7FDBC0CC48D2711


It is similar to operation of a script /scripts/suspendmysqlusers
But why? These accounts are active and are not suspended.
 
Oct 18, 2006
10
0
151
BUG found in /scripts/suspendmysqlusers !

Request:

"SELECT User, Password from mysql.user WHERE user = '$user' OR user LIKE '$user\_%'"

...gets any usernames, like user*

ANY!

And suspend him all...
I.e. user, user1, user2 user3_123 gets inverted passwords when "user" are really suspended.

Request should be like this:

"SELECT User, Password from mysql.user WHERE user = '$user' OR user LIKE $user\\_%'");

Ticket ID: 377857
 
Last edited: