SECURITY: Remove $config[db][password] when $config[debug] is TRUE

This commit is contained in:
Fredrick Brennan 2014-05-19 13:39:30 -04:00 committed by czaks
parent c878b308bf
commit f6e97b6e73

View File

@ -109,6 +109,18 @@ function error($message, $priority = true, $debug_stuff = false) {
)));
}
$pw = $config['db']['password'];
$debug_callback = function(&$item) use (&$debug_callback, $pw) {
global $config;
if (is_array($item)) {
$item = array_filter($item, $debug_callback);
}
return ($item !== $pw || !$pw);
};
$debug_stuff = array_filter($debug_stuff, $debug_callback);
die(Element('page.html', array(
'config' => $config,
'title' => _('Error'),