Ok, the layout of ticket has change bit... I can't find the exact same
information (global db variable), so I am not sure if it really/totally
gone. But when I press on locals button, I get a long list of vars and the
"db" var that show the connection string, looks like that :
<DAL uri="postgres://richard:********@127.0.0.1:5432/database">
I also, search the html file of the ticket and found not trace of the
postgres database password...
So I presume it ok.
Thanks
Richard
On Fri, Feb 1, 2013 at 3:40 PM, Richard Vézina
<ml.richard.vez...@gmail.com>wrote:
> I will try...
>
>
> On Fri, Feb 1, 2013 at 3:22 PM, Massimo Di Pierro <
> massimo.dipie...@gmail.com> wrote:
>
>> I think this has been fixed. Can you check trunk?
>>
>>
>> On Friday, 1 February 2013 14:17:10 UTC-6, Richard wrote:
>>>
>>> Hello,
>>>
>>> I don't know if it normal or not, but I found that DAL connection string
>>> password appear in clear in web2py tickets...
>>>
>>> Ex.:
>>>
>>> Variables
>>> global request <Storage {'function': 'update', 'body': <open
>>> fi...try_id': '1219', '_formname': 'table1/836'}>}>
>>> builtinTrue True
>>> request.args ['table1', '836']
>>> global select <function select>
>>> global db <DAL uri="postgres://******:*MYPASSWORDWASHERE*@
>>> 127.0.0.1:5432/**database <http://127.0.0.1:5432/database>">
>>> ].approved undefined
>>>
>>> I got this behavior with web2py 2.3.2
>>>
>>> Thanks
>>>
>>> Richard
>>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "web2py-users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to web2py+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>>
>>
>
>
--
---
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
