CollectiveIndustries / StarfleetDelta

Repository for Starfleet Delta Webpage, Database, and all in world scripts
https://www.starfleetdelta.com/
GNU General Public License v3.0
2 stars 4 forks source link

[Installer] Plaintext password in Command arguments #23

Closed Morketh closed 8 years ago

Morketh commented 8 years ago

The python installer launches MySQL with the password in plain text. This could be a security vulnerability in high usage environments. For regular home servers this shouldn't be that big of an issue but it does need to be addressed. Also python script displays password during install for the new MySQL Database administrator.