From bf5176a711986504fd73717eb9b0ce015f51bc3e Mon Sep 17 00:00:00 2001 From: Evan Prodromou Date: Sun, 24 Aug 2008 13:12:02 -0400 Subject: [PATCH] big scarygram warning in config.php.sample about using DB_DataObject's debug mode darcs-hash:20080824171202-84dde-fd3ed2b9645f2c2ec5439824dbc6f6a765c0a622.gz --- config.php.sample | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config.php.sample b/config.php.sample index a0768636dc..e5dfdbae2a 100644 --- a/config.php.sample +++ b/config.php.sample @@ -35,6 +35,11 @@ $config['site']['path'] = 'laconica'; $config['db']['database'] = 'mysql://laconica:microblog@localhost/laconica'; #$config['db']['ini_your_db_name'] = $config['db']['schema_location'].'/stoica.ini'; +# *** WARNING *** WARNING *** WARNING *** WARNING *** +# Setting debug to a non-zero value will expose your DATABASE PASSWORD to Web users. +# !!!!!! DO NOT SET THIS ON PRODUCTION SERVERS !!!!!! DB_DataObject's bug, btw, not +# ours. +# *** WARNING *** WARNING *** WARNING *** WARNING *** #$config['db']['debug'] = 0; #$config['db']['db_driver'] = 'MDB2';