hoo2/InformationSystemsSecurity
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Web app switched to non-root SQL account.

Browse Source
This commit is contained in:
Christos Choutouridis 2026-01-12 12:02:58 +02:00
parent fb80cb78eb
commit 3f7a2d2d61
3 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
passman-dev/db/init/01-create-pwd_mgr-db-withData.sql
View File

@ -22,6 +22,12 @@ CREATE TABLE IF NOT EXISTS `dummy` (
`id` int(11) DEFAULT NULL `id` int(11) DEFAULT NULL
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
-- Create a dedicated DB user for the web application (least privilege).
-- Grant only the required privileges on the application database.
CREATE USER IF NOT EXISTS 'passman_app'@'%' IDENTIFIED BY 'passman_app_pw';
GRANT SELECT, INSERT, UPDATE, DELETE ON pwd_mgr.* TO 'passman_app'@'%';
FLUSH PRIVILEGES;
CREATE TABLE IF NOT EXISTS `login_users` ( CREATE TABLE IF NOT EXISTS `login_users` (
`id` int(11) NOT NULL AUTO_INCREMENT, `id` int(11) NOT NULL AUTO_INCREMENT,
`username` varchar(20) NOT NULL, `username` varchar(20) NOT NULL,
@ -31,7 +37,7 @@ CREATE TABLE IF NOT EXISTS `login_users` (
) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; ) ENGINE=InnoDB AUTO_INCREMENT=4 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
INSERT INTO `login_users` (`id`, `username`, `password`) VALUES INSERT INTO `login_users` (`id`, `username`, `password`) VALUES
(1, 'u1', '$2y$10$L18u5/PyVkDgsce/DsUOQu0sKhTzh854Euhog3cVb1W4YAfgRzY8W'); /* php -r 'echo password_hash("p1", PASSWORD_DEFAULT), PHP_EOL;' */ (1, 'u1', '$2y$10$L18u5/PyVkDgsce/DsUOQu0sKhTzh854Euhog3cVb1W4YAfgRzY8W'); -- php -r 'echo password_hash("p1", PASSWORD_DEFAULT), PHP_EOL;'
CREATE TABLE IF NOT EXISTS `notes` ( CREATE TABLE IF NOT EXISTS `notes` (
`notesid` int(11) NOT NULL AUTO_INCREMENT, `notesid` int(11) NOT NULL AUTO_INCREMENT,

4
passman-dev/docker-compose.yml
View File

@ -8,9 +8,9 @@ services:
- ./php:/var/www/html - ./php:/var/www/html
environment: environment:
DB_HOST: db DB_HOST: db
DB_USER: root
DB_PASS: rootpass
DB_NAME: pwd_mgr DB_NAME: pwd_mgr
DB_USER: passman_app
DB_PASS: passman_app_pw
depends_on: depends_on:
- db - db

4
passman-dev/php/passman/config.php
View File

@ -3,8 +3,8 @@
// NOTE: In Docker, the DB host is the service name (e.g., "db"), not "localhost". // NOTE: In Docker, the DB host is the service name (e.g., "db"), not "localhost".
$DB_HOST = getenv('DB_HOST') ?: 'db'; $DB_HOST = getenv('DB_HOST') ?: 'db';
$DB_USER = getenv('DB_USER') ?: 'root'; $DB_USER = getenv('DB_USER') ?: 'passman_app';
$DB_PASS = getenv('DB_PASS') ?: 'rootpass'; $DB_PASS = getenv('DB_PASS') ?: 'passman_app_pw';
$DB_NAME = getenv('DB_NAME') ?: 'pwd_mgr'; $DB_NAME = getenv('DB_NAME') ?: 'pwd_mgr';
// Create a DB connection. // Create a DB connection.