From 0b108ca152093339d2389d65b6a136ff4f105feb Mon Sep 17 00:00:00 2001 From: mcolonna Date: Tue, 17 Jun 2025 14:28:33 +0200 Subject: [PATCH] change: remove limits to database pwd * * still sql injection safe --- srcs/requirements/mariadb/run.sh | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/srcs/requirements/mariadb/run.sh b/srcs/requirements/mariadb/run.sh index 1319dd1..0ca41d3 100755 --- a/srcs/requirements/mariadb/run.sh +++ b/srcs/requirements/mariadb/run.sh @@ -17,16 +17,10 @@ then mariadb-install-db --user=www --datadir=/db echo "creating database..." DATABASE_PWD="$(cat /run/secrets/database-pwd)" - if ! [[ "$DATABASE_PWD" =~ ^[a-zA-Z0-9_]+$ ]] - then - echo "the DB password must contain only letters, digits or '_'." - echo - exit 1 - fi echo ' FLUSH PRIVILEGES; CREATE DATABASE wp; - GRANT ALL PRIVILEGES ON wp.* TO www IDENTIFIED BY "'$DATABASE_PWD'"; + GRANT ALL PRIVILEGES ON wp.* TO www IDENTIFIED BY FROM_BASE64("'$(echo $DATABASE_PWD | base64)'"); FLUSH PRIVILEGES; ' | mariadbd -u root --bootstrap echo