#10 preferences

closed-duplicate
nobody
None
5
2003-02-15
2003-02-15
Anonymous
No

when in the preferences > manual plane

one can actually SEE the mysql PASSWORD as a
NORMAL user !!!!!!!!!!!!!!!!!

yes, i do have enable_manual_config set to 0

this bloks me from using the display tab, not the manual
tab of the preferences

Discussion

  • Logged In: NO

    ok
    might have found a solution for it myself

    in preference.php
    line 805

    it says
    if ($sel == '5' && !$env[enable_manual_config]) {

    this should read

    if ($sel == '6' && !$env[enable_manual_config]) {

    then setting enable_manual_config = 0 will prevent from
    viewing the manual config tab

    however, i do feel that whatever settings u have, certain info
    should never be shown to any user.

    the mysql database password is _definitely_ one of those
    things.

    so if u could rewrite the preference part, so that a user will
    never see, or be able to influence anything that has to to with
    server config ...

    thnx

    cnf@antwerpen.be

     
  • Juliot Etienne
    Juliot Etienne
    2003-02-15

    • status: open --> closed-duplicate