Browse Source

[ZF-11839] fixed security issue (possible password disclosure)

git-svn-id: http://framework.zend.com/svn/framework/standard/trunk@24526 44c647ce-9c0f-0410-b52a-842ac1e357ba
sgehrig 14 years ago
parent
commit
848a949983
1 changed files with 1 additions and 1 deletions
  1. 1 1
      library/Zend/Auth/Adapter/Ldap.php

+ 1 - 1
library/Zend/Auth/Adapter/Ldap.php

@@ -371,7 +371,7 @@ class Zend_Auth_Adapter_Ldap implements Zend_Auth_Adapter_Interface
                 } else {
                     $line = $zle->getLine();
                     $messages[] = $zle->getFile() . "($line): " . $zle->getMessage();
-                    $messages[] = str_replace($password, '*****', $zle->getTraceAsString());
+                    $messages[] = preg_replace('/\b'.preg_quote($password, '/').'\b/', '*****', $zle->getTraceAsString());
                     $messages[0] = 'An unexpected failure occurred';
                 }
                 $messages[1] = $zle->getMessage();