Security: Could we please not throw the hostnames connection string when connection fails.

purekid / mongodm

MongoDB ORM that includes support for references,embed and multilevel inheritance.

MIT License

200 stars 47 forks source link

Security: Could we please not throw the hostnames connection string when connection fails. #58

Open tusharvikky opened 10 years ago

tusharvikky commented 10 years ago

Hello, Either we could just throw Unable to connect to server, Please contact Server Admin. -or- something like this.

https://github.com/purekid/mongodm/blob/master/src/Purekid/Mongodm/MongoDB.php#L189

jrschumacher commented 10 years ago

Throwing the hostname connection is done by MongoDB. However you bring up a good point with regards to security. Maybe we could add a catch for those and route them to Mongodb style exceptions.