Many developer installation not use database password.

  $form['database']['bugbits_db_password'] = array(
    '#type' => 'textfield',
  	'#size' => 15,
//   '#required' => TRUE, // <<<<<<<
  	'#title' => t('Database password for mantis database'), 
  	'#default_value' => variable_get('bugbits_db_password', ''),
  	'#description' => t('Give the password for the database in which the mantis tables are stored here.')
  );

Comments

daften’s picture

Assigned: Unassigned » daften
Status: Active » Needs review

That is true, but that is still insecure, even for developer installation. Can you give some more arguments why the default code should not ask for a password. It is then still possible for many people to make mistakes in their setup phase.
(I am considering changing this, but I need to be convinced ;))

tmckeown’s picture

Status: Needs review » Closed (works as designed)

This seems silly. A db without a password? Closing out