TYPO3 Core

Can your database user, which you are using for TYPO3, execute following query: "SHOW DATABASES"?

Hi Alexander

Thanks for this hint - previous Installations of TYPO3 until 4.7 did not had this problem

Ad this hint to the install tool so people will know about it that TYPO3 since 6.1 is getting a "special case" like phpMyAdmin.

1. Remove skip-show-database if you use phpMyAdmin, TYPO3 or a similar tool to
2. manage your databases, it will just frustrate you or your users.
   #skip-show-database

as i.e. virtualmin, adminer, chive shows you tables correctly even you are logged in as a user and "skip-show-database" enabled

i.e. if your logged in a typo3 installation and have adminer installed your database will show up correctly

or even better perform a check before installing TYPO3 6.1 of all Server requirements to run TYPO3 6.1+ and than continue with the installation. In this case the hint should simply pop up when "skip-show-database" is not disabled

Andi

Also previous installations of TYPO3 have this problem.

Anyway, how does virtualmin, adminer, chive, ... can show the databases if "SHOW DATABASES" isn't allowed for the user?

BTW. a check for this (and other DB privileges are planed.

Hi Alexander you wrote:

"Anyway, how does virtualmin, adminer, chive, ... can show the databases if "SHOW DATABASES" isn't allowed for the user?" 

I only wrote about what is what it is. only phpMyAdmin and TYPO3 seems to have problems with this settings.

Andi

As I've no crystal ball, I can't predict why it should work with "virtualmin, adminer, chive" on your system and not with TYPO3 and phpMyAdmin.

Also, if this configuration would be the same as with TYPO3 4.7, you should had this problem already with 4.7, as the code didn't changed on this point. So this all (and most of the other bugs from you) seem to be a problem of your system.

Well it is not one but 3 systems which are different from each other (and only one is ours) and same symptoms. Until 4.7 we had never those problems! right! but also adminer integrated in the TYPO3 backend was just working fine and much better than phpmyadmin. On the servers itself has nothing changed afaik.

Nevertheless I would put a hint into the install tool so people know that TYPO3 is like phpmyadmin a special case which will not make them happy if they have it enabled.

Since TYPO3 CMS 4.7 the minimum MySQL version is 5.0, since this version we could also use:

SELECT SCHEMA_NAME FROM information_schema.SCHEMATA

to get the databases to which we have access. Maybe changing the "SHOW DATABASE" to this could be enough.

Tested localy:

> SHOW DATABASES
#1227 - Access denied; you need (at least one of) the SHOW DATABASES privilege(s) for this operation

> SELECT SCHEMA_NAME FROM information_schema.SCHEMATA
SCHEMA_NAME
-----------
information_schema

So best way to go is to change the SQL statement.

The DBAL native driver uses the deprecated php funtion "mysql_list_dbs" which will do a "SHOW DATABASES" this should be changed in another issue report.

To test the patch you need to change the my.cfg of your mysql server. You need to add "skip-show-database" to the [mysqld] section and restart your mysql server.

Patch set 2 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/23637

Oh dear, that makes this setting pretty useless as a "security mechanism" then. Thanks for researching.

Not really, "SHOW DATABASES" can show more databases then where you have no privileges, the shema only shows databases where you have some. ;)

Patch set 3 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/23637

Patch set 4 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/23637

Patch set 5 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/23637

Patch set 1 for branch TYPO3_6-1 has been pushed to the review server.
It is available at https://review.typo3.org/23795