Security: Remove connection information when opening db manager when 'db_manager_enabled' is true, reducing the likeliness of a successful BREACH attack - refs BT#21289

pull/5023/head
Yannick Warnier 2 years ago
parent 34576eb281
commit cdc12f9956
  1. 2
      main/admin/index.php

@ -718,7 +718,7 @@ if (api_is_platform_admin()) {
$databaseName = $_configuration['main_database']; $databaseName = $_configuration['main_database'];
$items[] = [ $items[] = [
'url' => "db.php?username=$username&db=$databaseName&server=$host", 'url' => "db.php",
'label' => get_lang('DatabaseManager'), 'label' => get_lang('DatabaseManager'),
]; ];
} }

Loading…
Cancel
Save