Skip to content

Error handling #16

@kwilliams

Description

@kwilliams

The demo has a nasty information disclosure problem:

Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42000] [1044] Access denied for user 'starlgco_Note'@'localhost' to database 'starlgco_OpenNote'' in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php:50 Stack trace: #0 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(50): PDO->__construct('mysql:host=loca...', 'starlgco_Note', 'Kt,Lp5D]UhUW') #1 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(82): Core::mysqlConnect() #2 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/Authenticater.php(17): Core::query('SELECT COUNT(*)...', Array) #3 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/ajax.php(14): Authenticater::checkAvailability('test123') #4 {main} thrown in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php on line 50

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions