phpMyAdmin / Bugs / #3889 (ok 4.1.6) When login fails and error display is active, login data is displayed

#3889 (ok 4.1.6) When login fails and error display is active, login data is displayed

Milestone: 4.1.5

Status: fixed

Owner: Marc Delisle

Labels: None

Priority: 1

Updated: 2014-01-26

Created: 2013-04-26

Creator: J.M. Rütter

Private: No

Hide hosts, usernames and passwords when displaying calls to *_connect functions in the backtrace. Otherwise sensitive login data may get exposed to people connecting to PMA after the configured MySQL server goes back online after being offline. Minor, as backtraces are hidden per default.

Discussion

Marc Delisle - 2013-05-14

Status: open-fixed --> closed-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michal Čihař - 2013-06-11

Status: closed-fixed --> fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

azurIt - 2014-01-24

This should be reopened as login data are exposed again.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2014-01-24

summary: (ok 4.0.1) When login fails and error display is active, login data is displayed --> When login fails and error display is active, login data is displayed

status: fixed --> open

assigned_to: Ann + J.M. --> Marc Delisle

Group: 4.0.0 --> 4.1.5
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2014-01-24

Thanks azurit, please confirm the fix.

Fixed regression with https://github.com/phpmyadmin/phpmyadmin/commit/2d9013379c432dcf25334c6e3dbb6c04f72c3fdd.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2014-01-24

summary: When login fails and error display is active, login data is displayed --> (ok 4.1.6) When login fails and error display is active, login data is displayed

status: open --> resolved
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

azurIt - 2014-01-24

fixed, thank you

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2014-01-26

Status: resolved --> fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

(ok 4.1.6) When login fails and error display is active, login data is displayed

A software tool to bring MySQL to the Web

Group

Searches

Help

#3889 (ok 4.1.6) When login fails and error display is active, login data is displayed

Discussion