2017-05-03 10:56 GMT+02:00 XIAO DAI <[email protected]>:

> I have compiled SQLite v3.15.2 with the functions
> "sqlite3_user_authenticate, it runs well, for all the versions > 3.15.2, I
> can add the logins into the database, but sqlite(shell.c) does NOT ask for
> the authentication.
>

From https://www.sqlite.org/src/artifact/e6641021a9210364

Probably because the shell you're using is not compiled with the
-DSQLITE_USER_AUTHENTICATION compile-time option.

The User-Auth extension is based on the presence of the sqlite_user table,
which is somewhat "protected" simply by using the reversed sqlite_ prefix,
unless using "PRAGMA writable_schema=ON", as the doc above mentions.

So basically any normal SQLite app can bypass the user-auth, unless the DB
is also encrypted. --DD
_______________________________________________
sqlite-users mailing list
[email protected]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to