Menu ▾ ▴

#376 DB Password revealed when db server down

Major
open
nobody
password exposed (1)
1
2017-02-22
2017-02-22
Anonymous
No

Hi there,

Today I tried to switch off the database server to know what will happen to the system and to my surprise, the password for my database is revealed!

What can we do to prevent this from happening? From the server or the software side?

1 Attachments
error-password-revealed.jpg

Discussion

  • Campbell Morrison

    Campbell Morrison - 2017-02-22

    Make sure you have 'display_errors' set to '0' in your php.ini settings. And/or add the following line at the bottom of internalconfig.inc.php

    ini_set('display_errors', '0');
     
  • Comment has been marked as spam. 
    Undo

    View and moderate all "bugs Discussion" comments posted by this user

    Mark all as spam, and block user from posting to "DO NOT USE - Bugs"

    Anonymous

    Anonymous - 2017-02-22

    Yep, precisely that works Campbell!

    Thanks much for your expert advice.. :)