diff options
| author | Ben Fuhrmannek | 2014-07-09 13:55:58 +0200 |
|---|---|---|
| committer | Ben Fuhrmannek | 2014-07-09 13:55:58 +0200 |
| commit | 84996270798fccffe2da890ad7a7c270d298a6e8 (patch) | |
| tree | 2e3d1e7bdc31138e28c666232888aa21a07484d6 /tests/sql/mysqli_connect_invalid_username.phpt | |
| parent | f98d4e20ffc1238a0f84729573a46fcd8d550f1e (diff) | |
enforce SQL username check + return FALSE instead of bailout
Diffstat (limited to 'tests/sql/mysqli_connect_invalid_username.phpt')
| -rw-r--r-- | tests/sql/mysqli_connect_invalid_username.phpt | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/tests/sql/mysqli_connect_invalid_username.phpt b/tests/sql/mysqli_connect_invalid_username.phpt new file mode 100644 index 0000000..532254f --- /dev/null +++ b/tests/sql/mysqli_connect_invalid_username.phpt | |||
| @@ -0,0 +1,17 @@ | |||
| 1 | --TEST-- | ||
| 2 | Mysqli connect with user_match not matching username | ||
| 3 | --INI-- | ||
| 4 | extension=mysqli.so | ||
| 5 | suhosin.log.stdout=32 | ||
| 6 | --SKIPIF-- | ||
| 7 | <?php | ||
| 8 | include('skipifmysqli.inc'); | ||
| 9 | include('skipif.inc'); | ||
| 10 | ?> | ||
| 11 | --FILE-- | ||
| 12 | <?php | ||
| 13 | include('connect.inc'); | ||
| 14 | $mysqli = new mysqli($host, "invalid\x01_username", $passwd, $db, $port, $socket); | ||
| 15 | ?> | ||
| 16 | --EXPECTREGEX-- | ||
| 17 | ALERT - SQL username contains invalid characters.* \ No newline at end of file | ||