[Tickets #5101] Re: horde disclosure of DB connection string in error message

[bugs at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=5101
-----------------------------------------------------------------------
 Ticket             | 5101
 Updated By         | liamr at deathstar.org
 Summary            | horde disclosure of DB connection string in error message
 Queue              | Horde Base
 Version            | HEAD
 Type               | Bug
 State              | Not A Bug
 Priority           | 1. Low
 Owners             | 
-----------------------------------------------------------------------


liamr at deathstar.org (2007-03-12 12:24) wrote:

Ok, so I guess this more "feedback" than a bug request at this point.  
Could the docs or the wiki explicitly mention that the DB object is only
dumped for administrators and not for the average user?  I've worried that
we were exposing our DB connection information during DB problems for years
now.