#43635 [Opn->Csd]: php_mysql.c password handling incorrect
ID: 43635
Updated by: iliaa@php.net
Reported By: jost_boekemeier at yahoo dot de
-Status: Open
+Status: Closed
Bug Type: MySQL related
Operating System: Any
PHP Version: 5.2.5
New Comment:
This bug has been fixed in CVS.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
Thank you for the report, and for helping us make PHP better.
Previous Comments:
------------------------------------------------------------------------
[2007-12-19 10:47:45] jost_boekemeier at yahoo dot de
Description:
------------
The following code from php_mysql.c trashes the default_password,
obtained from the php.ini file.
passwd = MySG(default_password);
...
case 3: {
convert_to_string_ex(z_user);
convert_to_string_ex(z_passwd);
user = Z_STRVAL_PP(z_user);
passwd = Z_STRVAL_PP(z_passwd);
}
Reproduce code:
---------------
Set the mysql default password in the php.ini file and call mysql
connect as follows:
mysql(foo, bar, null, TRUE);
Expected result:
----------------
passwd should not be set if argument is null.
Actual result:
--------------
Empty password is send to mysql.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=43635&edit=1
Thread (2 messages)