#27284 [NEW]: User Password in PHPInfo

From: adam at comsmart dot org Operating system: Linux PHP version: Irrelevant PHP Bug Type: PHP options/info functions Bug description: User Password in PHPInfo Description: ------------ When you call the phpinfo function, it posts your password on the resulting page. Therefore, you can not include a call to phpinfo on any public page, because people could get into your system. I think that the default call to phpinfo should not output the username/password of the owner of the file. -- Edit bug report at http://bugs.php.net/?id=27284&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=27284&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=27284&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=27284&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=27284&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=27284&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=27284&r=needscript Try newer version: http://bugs.php.net/fix.php?id=27284&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=27284&r=support Expected behavior: http://bugs.php.net/fix.php?id=27284&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=27284&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=27284&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=27284&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=27284&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=27284&r=dst IIS Stability: http://bugs.php.net/fix.php?id=27284&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=27284&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=27284&r=float