fix(databases): restrict database updates to allowed fields only
- Modified the update_by_uuid method to use only the specified allowed fields from the request for database updates, enhancing data integrity and security.
This commit is contained in:
@@ -580,7 +580,7 @@ class DatabasesController extends Controller
|
||||
}
|
||||
|
||||
// Only update database fields, not backup configuration
|
||||
$database->update($request->all());
|
||||
$database->update($request->only($allowedFields));
|
||||
|
||||
if ($whatToDoWithDatabaseProxy === 'start') {
|
||||
StartDatabaseProxy::dispatch($database);
|
||||
|
Reference in New Issue
Block a user