note 130626 added to class.sensitiveparametervalue
| From: | fossalta@xs4all.nl | Date: | Mon, 26 Jan 2026 09:54:38 +0000 |
| Subject: | note 130626 added to class.sensitiveparametervalue | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-222518@lists.php.net to get a copy of this message | ||
While this class protects against accidental echo and/or var_dump, it does NOT protect against some
other php functions:
<?php
$value = new SensitiveParameterValue('MyPassword');
var_dump($value); // Safe
echo $value; // PHP error: could not be converted to string
var_dump(get_mangled_object_vars($value)); // Password exposed!!!
?>
----
Server IP: 206.189.2.9
Probable Submitter: 95.98.156.14
----
Manual Page -- https://php.net/manual/en/class.sensitiveparametervalue.php
Edit -- https://main.php.net/note/edit/130626
Del: integrated -- https://main.php.net/note/delete/130626/integrated
Del: useless -- https://main.php.net/note/delete/130626/useless
Del: bad code -- https://main.php.net/note/delete/130626/bad+code
Del: spam -- https://main.php.net/note/delete/130626/spam
Del: non-english -- https://main.php.net/note/delete/130626/non-english
Del: in docs -- https://main.php.net/note/delete/130626/in+docs
Del: other reasons-- https://main.php.net/note/delete/130626
Reject -- https://main.php.net/note/reject/130626
Search -- https://main.php.net/manage/user-notes.php