Forráskód Böngészése

[ZF-12038] fixed problem with passwords longer than 15 characters being not correctly removed from the stack trace

git-svn-id: http://framework.zend.com/svn/framework/standard/trunk@24618 44c647ce-9c0f-0410-b52a-842ac1e357ba
sgehrig 14 éve
szülő
commit
3c0e440987
1 módosított fájl, 5 hozzáadás és 1 törlés
  1. 5 1
      library/Zend/Auth/Adapter/Ldap.php

+ 5 - 1
library/Zend/Auth/Adapter/Ldap.php

@@ -371,7 +371,11 @@ class Zend_Auth_Adapter_Ldap implements Zend_Auth_Adapter_Interface
                 } else {
                 } else {
                     $line = $zle->getLine();
                     $line = $zle->getLine();
                     $messages[] = $zle->getFile() . "($line): " . $zle->getMessage();
                     $messages[] = $zle->getFile() . "($line): " . $zle->getMessage();
-                    $messages[] = preg_replace('/\b'.preg_quote($password, '/').'\b/', '*****', $zle->getTraceAsString());
+                    $messages[] = preg_replace(
+						'/\b'.preg_quote(substr($password, 0, 15), '/').'\b/',
+						'*****',
+						$zle->getTraceAsString()
+					);
                     $messages[0] = 'An unexpected failure occurred';
                     $messages[0] = 'An unexpected failure occurred';
                 }
                 }
                 $messages[1] = $zle->getMessage();
                 $messages[1] = $zle->getMessage();