search

solero / houdini

A Club Penguin private server written in Python 3
https://houdini.readthedocs.io/
MIT License
281 stars 54 forks source link

Update houdini.sql #56

Closed Blueyzachary closed 4 years ago

Blueyzachary commented 4 years ago

Change the houdini.sql so that, by default, the basil user is a moderator, so manager can be easily used without modifying the postgreSQL database.

ghost commented 4 years ago

This would be insecure as the account has a default password.

Blueyzachary commented 4 years ago

This would be insecure as the account has a default password.

Yes, but it would be easier to change the password for basil as well.

ghost commented 4 years ago

And the chances of someone doing that are small. It leaves a useless vulnerable area open.

Blueyzachary commented 4 years ago

If it's in the guide, then I think the chances increase

ghost commented 4 years ago

It's a general best practice not to give default accounts higher privilege.

ben-pearce commented 4 years ago

See https://github.com/solero/houdini/pull/57