Creating DB with pass, but pass not required to connect - Mailing list pgsql-general

From Pablo Gosse
Subject Creating DB with pass, but pass not required to connect
Date
Msg-id 8FD9D015D273DA4BB2B7B220C4D7B26902942A@pg-adr-exch-01.adr.unbc.ca
Whole thread Raw
Responses Re: Creating DB with pass, but pass not required to connect
List pgsql-general
Hi folks.  I'm creating a database using the following command:

createdb -U pablo -W pablotest1

I'm prompted to enter the password to create the DB, and after doing so
the db is created successfully.

However, when I connect to this database via a php script, I can enter
any valid database user, and I can enter anything for the password (or
leave it blank), and I'm still able to connect.

So, each of these connection calls works:

$conn->Connect('localhost','pablo','realpass','pablotest1');
$conn->Connect('localhost','pablo','','pablotest1');
$conn->Connect('localhost','pablo','abc123','pablotest1');
$conn->Connect('localhost','bsc','notapass','pablotest1');
$conn->Connect('localhost','bsc','','pablotest1');

Obviously I'm doing something wrong here, since I don't want scripts to
be able to connect without the proper credentials.

Can anyone give me an idea if I'm executing the createdb command
incorrectly, or if something on the server level might be causing this?

Cheers and TIA,

Pablo

pgsql-general by date:

Previous
From: Patrick Hatcher
Date:
Subject: Vacuum hangs
Next
From: Tom Lane
Date:
Subject: Re: Vacuum hangs