483875 - Socorro UI: database connection problem reveals database password to all

Status: RESOLVED WONTFIX

(Socorro :: General, task)

Description

[K Lars Lohn [:lars] [:klohn]]

Attachment: screen capture of SocorroUI showing the database password in plain text

granted there was a misconfiguration, but when connecting to the database, there should be a zero percent chance that a failure to connect should hand a password out to the public...

Comment 1

[Austin King [:ozten]]

Was this file in production changed recently?

webapp-php/application/config/config.php

It is not under source control. I will try to repro issue to confirm that this file is what triggers this behavior.

Comment 2

[Austin King [:ozten]]

Please get a copy of production webapp-php/application/config/config.php

Which will have settings including:
$config['display_errors'] = FALSE;

which is an important part of a prod Kohana app.

Comment 3

[Michael Morgan [:morgamic]]

This can't happen in prod because debugging is disabled (errors don't appear). 
So I'm not sure this is a bug?

Comment 4

[Michael Morgan [:morgamic]]

Damn... mid-aired.