Digitalstack/myaac
2
0
Fork 0
mirror of https://github.com/slawkens/myaac.git synced 2025-04-26 17:29:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Security: Fixed leaking database password when can't connect

Browse Source 
This fixes this:

https://otland.net/threads/myaac-leaking-user-database-password.266095/

Instead now, the error will be logged.
This commit is contained in:
tobi132 2019-12-03 00:36:57 +01:00
parent 1970a00bb6
commit a55ec208aa
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
system/database.php
View File

@ -110,12 +110,10 @@ defined('MYAAC') or die('Direct access not allowed!');
return; // installer will take care of this
}
die('ERROR: Cannot connect to MySQL database.<br/>' .
'Possible reasons:' .
'<ul>' .
'<li>MySQL is not configured propertly in <i>config.lua</i>.</li>' .
'<li>MySQL server is not running.</li>' .
'</ul>' . $error);
throw new SensitiveException('ERROR: Cannot connect to MySQL database.' . PHP_EOL .
'Possible reasons:' . PHP_EOL .
' * MySQL is not configured propertly in config.lua.' . PHP_EOL .
' * MySQL server is not running.' . PHP_EOL .
$error->getMessage());
}
?>
}