This topic is locked

Multiple DBs

5/13/2008 4:22:35 PM
PHPRunner General questions
C
CRBM author

Hi everybody,
I need help with the security aspect of PHPRUNNER. We have multiple DBs hosted on the same MySQL server.
When we open a DB and login as a editor account, drop the Internet Explorer windows, open a new DB and login as "Guest", we are automatically logged as the account we previously use for the first DB.
So, if we are already logged as a "editor" account and we open another DB with the "Guest" account, we have the user name and the user right of the "editor" account in the second DB until we logoff.
Thanks for your help.

D
Dale 5/13/2008

Just in case this thought might help. What you are seeing is what I also was worried about. BUT, the browsers think they are smarter now, and actually share a browser connection amongst all similar browsers. So if you are logging into your multiple db's from the same computer, One tab will share the database settings amongst themselves.
Open one in FireFox and one in IE and you should not see this sharing of database connectivity.
Open two instances of FireFox and login to a db and they will also share the connection info.
Now normally a restricted user could never sign in as a less restricted user therefore, 1, 2 or three browser occurences, all running with the same connection sets as the restricted user. Great feature for them. Its just us developers that get bit with this one, as we want to see what all groups see by signing in as them, with are old Administration sign in active in the tab or window behind.
This may, I hope help. At least it is what I have experienced using PHPRunner very successfully for my projects and mulitple browsers considerations.
Hope this makes sense, its late and Im fading.