Просмотр исходного кода

[ZF-11839] fixed security issue (possible password disclosure)

git-svn-id: http://framework.zend.com/svn/framework/standard/trunk@24526 44c647ce-9c0f-0410-b52a-842ac1e357ba
sgehrig 14 лет назад
Родитель
Сommit
848a949983
1 измененных файлов с 1 добавлено и 1 удалено
  1. 1 1
      library/Zend/Auth/Adapter/Ldap.php

+ 1 - 1
library/Zend/Auth/Adapter/Ldap.php

@@ -371,7 +371,7 @@ class Zend_Auth_Adapter_Ldap implements Zend_Auth_Adapter_Interface
                 } else {
                 } else {
                     $line = $zle->getLine();
                     $line = $zle->getLine();
                     $messages[] = $zle->getFile() . "($line): " . $zle->getMessage();
                     $messages[] = $zle->getFile() . "($line): " . $zle->getMessage();
-                    $messages[] = str_replace($password, '*****', $zle->getTraceAsString());
+                    $messages[] = preg_replace('/\b'.preg_quote($password, '/').'\b/', '*****', $zle->getTraceAsString());
                     $messages[0] = 'An unexpected failure occurred';
                     $messages[0] = 'An unexpected failure occurred';
                 }
                 }
                 $messages[1] = $zle->getMessage();
                 $messages[1] = $zle->getMessage();