[GH-ISSUE #172] default Location of sqlite database reachable via http in some circumstances #111

New issue

Closed

opened 2026-02-28 01:21:02 +03:00 by kerem · 2 comments

kerem commented

2026-02-28 01:21:02 +03:00

Owner

Originally created by @margau on GitHub (Apr 17, 2018).
Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/172

Hello,
the default location of the userdb is ../etc/pdns.users.sqlite3

If you have installed nsedit in a directory (reachable via https://server/nsedit),
its possible to download the database trough https://server/etc/pdns.users.sqlite3.

Thats not extremly critical, because the passwords are hashed, but could be very bad.
A database is not something i would like to have available online to the public.

At least the user should be informed about this possibility to chose a proper, non-public available path.

Best regards
margau

Originally created by @margau on GitHub (Apr 17, 2018). Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/172 Hello, the default location of the userdb is ../etc/pdns.users.sqlite3 If you have installed nsedit in a directory (reachable via https://server/nsedit), its possible to download the database trough https://server/etc/pdns.users.sqlite3. Thats not extremly critical, because the passwords are hashed, but could be very bad. A database is not something i would like to have available online to the public. At least the user should be informed about this possibility to chose a proper, non-public available path. Best regards margau