]> mop.ddnsfree.com - git repositories - brisk.git/commit
keep the alarm password and the database credentials out of the reload dump
authorMatteo Nastasi <nastasi@alternativeoutput.it>
Wed, 7 Oct 2026 07:23:24 +0000 (09:23 +0200)
committerMatteo Nastasi <nastasi@alternativeoutput.it>
Wed, 7 Oct 2026 07:23:24 +0000 (09:23 +0200)
commit62d1a8fdff61724ed0e9ab37eac74da4ade70f1d
tree7e844b7041acc9a8865e7df756c03faefeec7a9e
parent90e6e2717e92bc5cfd2badea23be2ec02224b8be
keep the alarm password and the database credentials out of the reload dump

global_dump(), run after every "reload" of the daemon, printed the globals
it checks to stderr, that is to the daemon log, G_alarm_passwd and
G_dbauth among them: the password of admin.php and the connection string
of the database, password included, in clear in a log file.

The dump is there to show that the globals survived the reload, and for
those two it is enough to know whether they are set: they are now printed
as "(set)" or "(empty)". The other globals are printed as before.

Checked by calling global_dump() with both secrets set and empty: the log
says set or empty and contains neither value.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
web/Obj/sac-a-push.phh