MySQL Password

[blar]

don't want anyone can see your mysqlpassword in the admin section?

edit admin.php

search

Code Select Expand

         <td class="windowbg2" bgcolor="' . $color['windowbg2'] . '" width="400"><font size="2">' . $txt['yse7'] . '</font></td>
                        <td class="windowbg2" bgcolor="' . $color['windowbg2'] . '"><input type="text" name="db_passwd" value="' . $db_passwd . '" /></td>


replace with

Code Select Expand

         <td class="windowbg2" bgcolor="' . $color['windowbg2'] . '" width="400"><font size="2">' . $txt['yse7'] . '</font></td>
                        <td class="windowbg2" bgcolor="' . $color['windowbg2'] . '"><input type="password" name="db_passwd" value="' . $db_passwd . '" /></td>


the mysql password field is then a REAL password field

[Joseph Fung]

That's not going to change anything.  A person can just look at the HTML's sourcecode and read your password.

[blar]

i don't like that anyone can watch on my screen and read the password. (eg if you on a lanparty, meet friends...)

[[Unknown]]

I would go into it a little more - make it so value="" (or simply omit that attribute) and then when you check the stuff they submitted, use the old password if it's still blank.  Of course, this means they have to have a password for the mySQL to work......

hmmmmm....

-[Unknown]

[blar]

value="" is not good if you save settings - this kill your password

[[Unknown]]

value="" is not good if you save settings - this kill your password

Please continue to read the rest of my post.

-[Unknown]

[Björn]

Admin.pl:

thats simple, add after:

   $helpfile = (isset($HTTP_POST_VARS['helpfile']) ? $HTTP_POST_VARS['helpfile'] : "$boardurl/YaBBHelp/index.html");

this line:

   $db_passwd =(isset($HTTP_POST_VARS['db_passwd']) ? $db_passwd : $HTTP_POST_VARS['db_passwd']);


and replace line 1101 by:
<td class="windowbg2" bgcolor="' . $color['windowbg2'] . '"><input type="text" name="db_passwd" value="" /></td>


Bjoern

[[Unknown]]

Exactly! (although you mean .php not .pl :p)

-[Unknown]

[Björn]

jp

at the moment i have the pl Version from YaBB, but when all errors in 1.5 are fixed i will use it.

[Björn]

here is the mod:

Download

[TF]

Bjørn:

Parse error: parse error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /home/sites/mysite/www/Sources/Admin.php on line 1101

[Björn]

hhm, works for me fine.

anyone else installed it ?

[Mr.Sins]

Admin section do you mean "Forum Preferences and Settings"

its the only place where i saw my psw revealed.

does your mod keep the psw in memory so when you apply your newsettings that your password isn't going to blank

[Björn]

Yes, in "Forum Preferences and Settings" the database password.

Only when you enter a new password your old one is overwritten.

[Mr.Sins]

sold, but link is dead.
i would appreciate it if you would mail it to me.