Edgewall Software

Changes between Initial Version and Version 1 of Ticket #5024


Ignore:
Timestamp:
Mar 25, 2007, 7:20:31 PM (17 years ago)
Author:
Christian Boos
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #5024

    • Property Owner changed from Jonas Borgström to Christian Boos
    • Property Priority normal → high
    • Property Milestone → 0.10.4

  • Ticket #5024 – Description

    initial v1  
    11We recently had a hiccup with our mysql service in which python lost the connection. When this happened, the MySQL backend raised an exception showing the trace of calls that caused the exception. In this trace, the username and password for the sql database were exposed in plain text.
    22i.e.
     3{{{
    34global MySQLConnection = <class 'trac.db.mysql_backend.MySQLConnection'>, path = u'/trac', user = u'trac', password = u'********', host = u'db.trac.sharpe-shell.org', port = None, params = {}
     5}}}
    46
    57The error message received follows:
     8{{{
    69OperationalError: (2013, 'Lost connection to MySQL server during query')
     10}}}
    711
    812This is a serious security issue. It seems as though some exception handling needs to be added in the SQL backend.