fix(databases): restrict database updates to allowed fields only
- Modified the update_by_uuid method to use only the specified allowed fields from the request for database updates, enhancing data integrity and security.
This commit is contained in:
@@ -580,7 +580,7 @@ class DatabasesController extends Controller
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Only update database fields, not backup configuration
|
// Only update database fields, not backup configuration
|
||||||
$database->update($request->all());
|
$database->update($request->only($allowedFields));
|
||||||
|
|
||||||
if ($whatToDoWithDatabaseProxy === 'start') {
|
if ($whatToDoWithDatabaseProxy === 'start') {
|
||||||
StartDatabaseProxy::dispatch($database);
|
StartDatabaseProxy::dispatch($database);
|
||||||
|
Reference in New Issue
Block a user