Bug #7768

DSN is return in case of connection problem

Details

Submitted	2006-05-31 12:57 UTC
From	markus at emedia-solutions-wolf dot de
Assigned	danielc
Status	Bogus
Package	DB
PHP Version	Irrelevant
OS	Linux
Roadmaps	(Not assigned)

Comments

[2006-05-31 12:57 UTC] markus at emedia-solutions-wolf dot de

Description:
------------
When a connection problem occurs during the connect method, then the DSN is added as user info to the error object.
In production environments this leads to a security breach since the database password is included and not masked.

[2006-06-09 11:53 UTC] markus at emedia-solutions-wolf dot de

Then its not me, but DB_DataObject. ;)
I found this problem on a live site we are hosting where the connection data was exposed to the client while the database was offline...