ErrorMailer - includes dangerous details in email
Posted: Wed Jun 20, 2007 8:36 am
I've just noticed that if you get ErrorEmailer top send you errors via email, it can, depending on the error, include potentially dangerous details like:
[database], [dbtype], [host] , [password], [username]
amongst others
Perhaps it would be best if it did not include does not some of these? Can you do this with the variable configure option? Only I cannot seem to get it to work.
Russ
[database], [dbtype], [host] , [password], [username]
amongst others
Perhaps it would be best if it did not include does not some of these? Can you do this with the variable configure option? Only I cannot seem to get it to work.
Russ