pear::DB little security issue...

I've received no answer form the package mainteiners... it is a little problem so I think I can publish it here. in pear::DB username, password and all other reserved information are saved in class variables!!! they MUST be deleted or unset as soon as the connection is established!!!!! Making a var_dump() on a pear::DB object i can see: ------ object(db_pgsql)(27) { ["connection"]=> resource(11) of type (pgsql link) [...some stuff...] ["dsn"]=> array(9) { ["phptype"]=> string(5) "pgsql" ["dbsyntax"]=> string(5) "pgsql" ["username"]=> string(5) "my_username" ["password"]=> string(7) "my_password" ["protocol"]=> string(3) "tcp" ["hostspec"]=> string(9) "127.0.0.1" ["port"]=> bool(false) ["socket"]=> bool(false) ["database"]=> string(10) "my_dbatabase" } [...some other stuff...] ------ thank you bye Ilias /** * Reply to: brain79(at)inwind.it * ICQ# 42797710 - FeSToso n°143 * PGP Key-ID:0x6A93736E (ldap://keyserver.pgp.com) * https://universibo.ing.unibo.it , http://www.brainetwork.net */