[Bug 20594] Database Display in Mediawiki

2009-09-17 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 Brion Vibber changed: What|Removed |Added CC||br...@wikimedia.org --- Comment #10

[Bug 20594] Database Display in Mediawiki

2009-09-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #9 from Platonides 2009-09-15 13:42:09 UTC --- (In reply to comment #7) > Kindly let me know if other potential information in being leaked. Settings you may want to verify: http://www.mediawiki.org/wiki/Manual:$wgShowExcepti

[Bug 20594] Database Display in Mediawiki

2009-09-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #8 from Roan Kattouw 2009-09-15 10:15:08 UTC --- (In reply to comment #7) > I am totally satisfied with Platonides. Displaying the Database is very very > useful for attacker. With it you are telling that "BOSS Come this is th

[Bug 20594] Database Display in Mediawiki

2009-09-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #7 from Suyash jain 2009-09-15 03:22:04 UTC --- I am totally satisfied with Platonides. Displaying the Database is very very useful for attacker. With it you are telling that "BOSS Come this is the Key Combination to Open my Lo

[Bug 20594] Database Display in Mediawiki

2009-09-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 Platonides changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|WONTFIX

[Bug 20594] Database Display in Mediawiki

2009-09-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 Roan Kattouw changed: What|Removed |Added CC||roan.katt...@gmail.com Sta

[Bug 20594] Database Display in Mediawiki

2009-09-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #4 from Platonides 2009-09-14 11:38:02 UTC --- dbname is not used by MWSuggest for anything. Unless you customized MWSuggest by changing $wgEnableMWSuggest to something which contains {dbname} To hide it, you can: a) Disable

[Bug 20594] Database Display in Mediawiki

2009-09-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #3 from Suyash jain 2009-09-14 04:03:18 UTC --- i feel MWsuggest is required, but as you said another open , same i have already done. I wanted to know will it make any trouble to running mediawiki. -- Configure bugmail:

[Bug 20594] Database Display in Mediawiki

2009-09-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 Platonides changed: What|Removed |Added CC||platoni...@gmail.com Keywords|

[Bug 20594] Database Display in Mediawiki

2009-09-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #2 from Platonides 2009-09-13 22:23:11 UTC --- Created an attachment (id=6549) --> (https://bugzilla.wikimedia.org/attachment.cgi?id=6549) Remove {dbname} placeholder You can remove it by disabling MWSuggest ($wgEnableMWSugg

[Bug 20594] Database Display in Mediawiki

2009-09-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=20594 --- Comment #1 from Suyash jain 2009-09-11 14:43:11 UTC --- I also found that this entire lines are displayed by the following function in includes/Skins.php static function makeVariablesScript( $data ) { global $