1. 13 Oct, 2001 15 commits
  2. 12 Oct, 2001 20 commits
  3. 11 Oct, 2001 5 commits
    • Bruce Momjian's avatar
      e98476eb
    • Bruce Momjian's avatar
      Update TODO list. · 9e642cd7
      Bruce Momjian authored
      9e642cd7
    • Bruce Momjian's avatar
      Add documention for ecpg -209 error. · c19ff887
      Bruce Momjian authored
      c19ff887
    • Tom Lane's avatar
      Suppress gcc warnings. · 97d0c8b2
      Tom Lane authored
      97d0c8b2
    • Bruce Momjian's avatar
      Tatsuo Ishii <t-ishii@sra.co.jp> writes: · 78f7ba13
      Bruce Momjian authored
      > As you can see, psql reconnect as any user if the password is same as
      > foo. Of course this is due to the careless password setting, but I
      > think it's better to prompt ANY TIME the user tries to switch to
      > another user. Comments?
      
      Yeah, I agree.  Looks like a simple change in dbconnect():
      
          /*
           * Use old password if no new one given (if you didn't have an old
           * one, fine)
           */
          if (!pwparam && oldconn)
              pwparam = PQpass(oldconn);
      
      to
      
          /*
           * Use old password (if any) if no new one given and we are
           * reconnecting as same user
           */
          if (!pwparam && oldconn && PQuser(oldconn) && userparam &&
              strcmp(PQuser(oldconn), userparam) == 0)
              pwparam = PQpass(oldconn);
      
                              regards, tom lane
      78f7ba13