Oliver Hader 2e7133d619 [SECURITY] Information disclosure on database failures ...

In case the database is not responding, e.g. due to "too many connections"
cut-off database credentials might be shown and system path be revealed.
In terms of security this is considered as information disclosure.

2016-06-04 20:41:03 +02:00

..

manager

fix setting of passwords in case mysql-access-hosts list gets changed, fixes #1407

2014-04-14 14:35:12 +02:00

class.Database.php

[SECURITY] Information disclosure on database failures

2016-06-04 20:41:03 +02:00

class.DbManager.php

fight stupidity - teach your customers not to use password == username

2014-05-18 11:16:35 +02:00