obfuscate password in config #1487

lib/plugins/authpdo/auth.php

@@ -42,7 +42,7 @@ class auth_plugin_authpdo extends DokuWiki_Auth_Plugin {
             $this->pdo = new PDO(
                 $this->getConf('dsn'),
                 $this->getConf('user'),
-                $this->getConf('pass'),
+                conf_decodeString($this->getConf('pass')),
                 array(
                     PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, // always fetch as array
                     PDO::ATTR_EMULATE_PREPARES => true, // emulating prepares allows us to reuse param names

lib/plugins/authpdo/conf/metadata.php

@@ -8,7 +8,7 @@
 $meta['debug']              = array('onoff', '_caution' => 'security');
 $meta['dsn']                = array('string', '_caution' => 'danger');
 $meta['user']               = array('string', '_caution' => 'danger');
-$meta['pass']               = array('password', '_caution' => 'danger');
+$meta['pass']               = array('password', '_caution' => 'danger', '_code' => 'base64');
 $meta['select-user']        = array('', '_caution' => 'danger');
 $meta['select-user-groups'] = array('', '_caution' => 'danger');
 $meta['select-groups']      = array('', '_caution' => 'danger');