I recall seeing this "feature" discussed on Bugtraq a few weeks ago. IIRC there are updated MySQL versions that fix this bug. What version of MySQL are you running?
> -----Original Message----- > From: Jeroen Bosch [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 29, 2005 6:59 AM > To: mysql@lists.mysql.com > Subject: Underscore functions as a wildcard ? > > We stumbled upon the following 'feature' of MySQL: > > > > If, for example user 'x' has a database called 'user_data' he > is able to > create a table called user2data and so on without create privileges. > > It looks like the underscore is used as some kind of > wildcard, now is the > question: is this correct or is this something that should not be? > > > > Kind regards, > > > > Jeroen Bosch > > > > > > -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
