mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 05:24:49 +09:00
pg_create_database/user and pg_grant/revoke built superuser SQL from raw names and passwords, unlike the MySQL helpers beside them. A quote in a password broke CREATE USER, and the create routes ignored that and returned credentials for a user that did not exist. Validate identifiers and privilege lists, escape the password, and surface a failed user as user_error instead of fake credentials.