From 0cc11d97d7a51d7d8f4332efd813b2008416d5e8 Mon Sep 17 00:00:00 2001
From: Andreas Gohr <andi@splitbrain.org>
Date: Sat, 12 Mar 2016 10:54:05 +0100
Subject: [PATCH] obfuscate password in config #1487
---
lib/plugins/authpdo/auth.php | 2 +-
lib/plugins/authpdo/conf/metadata.php | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/plugins/authpdo/auth.php b/lib/plugins/authpdo/auth.php
index 889726cbd..755e2305a 100644
--- a/lib/plugins/authpdo/auth.php
+++ b/lib/plugins/authpdo/auth.php
@@ -42,7 +42,7 @@ class auth_plugin_authpdo extends DokuWiki_Auth_Plugin {
$this->pdo = new PDO(
$this->getConf('dsn'),
$this->getConf('user'),
- $this->getConf('pass'),
+ conf_decodeString($this->getConf('pass')),
array(
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, // always fetch as array
PDO::ATTR_EMULATE_PREPARES => true, // emulating prepares allows us to reuse param names
diff --git a/lib/plugins/authpdo/conf/metadata.php b/lib/plugins/authpdo/conf/metadata.php
index 2fb4a86bf..85d1c5926 100644
--- a/lib/plugins/authpdo/conf/metadata.php
+++ b/lib/plugins/authpdo/conf/metadata.php
@@ -8,7 +8,7 @@
$meta['debug'] = array('onoff', '_caution' => 'security');
$meta['dsn'] = array('string', '_caution' => 'danger');
$meta['user'] = array('string', '_caution' => 'danger');
-$meta['pass'] = array('password', '_caution' => 'danger');
+$meta['pass'] = array('password', '_caution' => 'danger', '_code' => 'base64');
$meta['select-user'] = array('', '_caution' => 'danger');
$meta['select-user-groups'] = array('', '_caution' => 'danger');
$meta['select-groups'] = array('', '_caution' => 'danger');
--
GitLab