Question Security thread?

[Azurel]

Today plesk onyx gui reported

"ERROR: Zend_Db_Adapter_Exception: SQLSTATE[HY000] [2002] Connection refused"

with line in browser (copy from log, because closed accidental tab)

"/usr/local/psa/admin/externals/Zend/Db/Adapter/Pdo/Abstract.php(129): PDO->__construct('mysql:dbname=ps...', 'admin', '$AES-128-CBC$dd...', Array)"

is this really wise?

 

[IgorG]

Thank you for report.
Actually, the danger is not so great. Only $AES-128-CBC$ and the first two symbols in the output. It remains to find out another 30 symbols
But anyway we will fix it in upcoming updates.

 

[WebhostUK]

Thank you for the update IgorG.

 

[Azurel]

Thats never would be a problem, when plesk use basic auth as a optional security level
Protect plesk gui 11.5.30 with "basic auth" login (optional)

I wish that would be possible like older versions of plesk.

 

[IgorG]

Make sure that in panel.ini in [feedback] section you have not

sendRuntimeErrors = "1"