#4 Lost connection to DB reveals username & password

[qirex]

If the connection to the database is lost then the database administrator username and password is displayed in clear text.

The following is displayed when any page is requested:

Connection to <host> with login '<username>'/'<password>' failed.</password></username></host>

[Benjamin Schmitt]

With V2.5.0 (file download or SVN Rev. 41) the password is now shown with asteriscs (*) according the amount of letters as a hint. Username and hosts will still be shown.

Thanks for reporting.
If you like ChurchRota, I would be happy if you leave a review :-)