search

ryanhowdy / fcms

Family Connections - Create a private family website.
http://www.familycms.com
GNU General Public License v2.0
84 stars 41 forks source link

Most of the object carries the whole record of the database #584

Open bishu opened 6 years ago

bishu commented 6 years ago

Why most of the object carries the database details like hostname, databasename, database_username and password.

when I var_dump|($this->fcmsUser) I got all this data any when there is mysql query error also it shows whole the database details.

I am afraid if this records shows to the users they can access our database externally.

We should stop carry all the records every where and look for alternative.

ryanhowdy commented 5 years ago

I believe this will only happen when debug is turned on. Or, when you changed the code like adding a var_dump.

The user won't have access to that information otherwise