Not set <required> propertis on database password form

SiR - July 14, 2009 - 10:14
Project:Bugbits
Version:6.x-1.x-dev
Component:Code
Category:feature request
Priority:normal
Assigned:daften
Status:needs review
Description

Many developer installation not use database password.

  $form['database']['bugbits_db_password'] = array(
    '#type' => 'textfield',
  '#size' => 15,
//   '#required' => TRUE, // <<<<<<<
  '#title' => t('Database password for mantis database'),
  '#default_value' => variable_get('bugbits_db_password', ''),
  '#description' => t('Give the password for the database in which the mantis tables are stored here.')
  );

#1

daften - July 15, 2009 - 23:50
Assigned to:Anonymous» daften
Status:active» needs review

That is true, but that is still insecure, even for developer installation. Can you give some more arguments why the default code should not ask for a password. It is then still possible for many people to make mistakes in their setup phase.
(I am considering changing this, but I need to be convinced ;))

 
 

Drupal is a registered trademark of Dries Buytaert.