[FlexCP-devel] demo user causing havock

[Clickweb b. M. <ju...@li...>]

Just learned this morning that a web://cp demo user can add or delete =
databases.  In general, a demo user is prevented from doing any damage =
to the system but apparently the add/drop databases function skirts this =
protection.  Someone seems to have dropped my phpbb forum database at =
forum.hostinghacks.net.  had to restore from a backup two weeks old.  =
Feel free to log in as a demo user and see what I mean.  If you want to =
create or delete a database and try to do other stuff go ahead.  I have =
put the phpbb into a seperate domain so it should be protected now.

https://devel.moonshinehosting.com:2081=20
user: demo=20
pass: password=20

Note for the archives: This is in webcp CVS. Not tested in FlexCP.