Database user and password displayed to visitors !!! #22736
Description
| Q | A |
|---|---|
| Bug report? | yes |
| Symfony version | 3.0.9 |
Today there was a connection problem on 1&1 servers, and the connection can't be established between server with php code and server with database.
The message displayed was:
Fatal error: Uncaught PDOException: SQLSTATE[HY000] [1045] Access denied for
user 'user_DISPLAYED'@'212.227.24.46' (using password: YES) in /homepages/32/d63
2730529/htdocs/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnection.php:4
3 Stack trace: #0 /homepages/32/d632730529/htdocs/vendor/doctrine/dbal/lib/Doctr
ine/DBAL/Driver/PDOConnection.php(43): PDO->__construct('mysql:host=db63...',
'user_DISPLAYED', 'password_DISPLAYED', Array) #1 /homepages/32/d632730529/htdoc
s/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOMySql/Driver.php(41):
Doctrine\DBAL\Driver\PDOConnection->__construct('mysql:host=db63...',
'user_DISPLAYED', 'password_DISPLAYED', Array) #2 /homepages/32/d632730529/htdoc
s/vendor/doctrine/dbal/lib/Doctrine/DBAL/Connection.php(360):
Doctrine\DBAL\Driver\PDOMySql\Driver->connect(Array, 'user_DISPLAYED',
'password_DISPLAYED', Array) #3 /homepages/32/d632730529/htdocs/vendor/doctrine/
dbal/lib/Doctrine/DBAL/Connection.php(429): Doctrine\DBAL\Connection->connect()
#4 /homepages/32/d632730529/htdocs/vendor/doctrine/dbal/lib/Doctrine/DBAL/Connec
tion.php(3 in /homepages/32/d632730529/htdocs/vendor/doctrine/dbal/lib/Doctrine/
DBAL/Driver/AbstractMySQLDriver.php on line 103"
user_DISPLAYED = The real username !...
password_DISPLAYED = The real database password !...
However I override the error page of TwigBundle.