Do not print passwords to the page

2001-12-21 22:38:03 +00:00 · 2001-12-21 22:38:03 +00:00 · f5ccede031
commit f5ccede031
parent d1f4be1882
1 changed files with 9 additions and 1 deletions
--- a/setup/config.php
+++ b/setup/config.php
@ -193,7 +193,15 @@
 					break;
 				case 'value':
 					$newval = ereg_replace(' ','_',$newval);
-					$t->set_var($value,$current_config[$newval]);
+					/* Don't show passwords in the form */
+					if(ereg('passwd',$value) || ereg('password',$value) || ereg('root_pw',$value))
+					{
+						$t->set_var($value,'');
+					}
+					else
+					{
+						$t->set_var($value,$current_config[$newval]);
+					}
 					break;
 				case 'selected':
 					$configs = array();