Timeline for Is my website's PHP registration system secure?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 26, 2021 at 0:53 | comment | added | Roland Illig | @YourCommonSense Thank you for that explanation, I incorporated it into my answer. | |
| Feb 26, 2021 at 0:53 | history | edited | Roland Illig | CC BY-SA 4.0 |
explain why the PDO stack trace must not be preserved
|
| Feb 25, 2021 at 18:04 | comment | added | Warlock | @Roland Illig Thank you so much for your answer. Clear and objective answer, thanks for the tips | |
| Feb 25, 2021 at 15:28 | comment | added | Your Common Sense | If they remove the try block and only keep the single line $this->database = ... instead, the original stack trace will be preserved, including all information about the actual cause of the exception including database credentials, which feels at least awkward and some argue being a security breach to have database credentials revealed if not to the client but even in the sever logs anyway. | |
| Feb 25, 2021 at 14:29 | history | edited | Roland Illig | CC BY-SA 4.0 |
added 162 characters in body
|
| Feb 25, 2021 at 14:22 | history | answered | Roland Illig | CC BY-SA 4.0 |