I've currently got this tagged as a support issue, but I suspect it should be tagged as a bug.

Last night, my web host must have rebooted their database server, as I got an unable to connect to database error.

When I pointed my browser to the website, instead of /node, my site showed a drupal generated page, complete with drupal icon, which gave me this error message.

However what was worrisome is that it it revealed the database IP as well as my database username on that page. This information would have been viewable by anyone trying to access my website at that moment.

This strikes me as an unsafe thing for Drupal to be doing.

I have got the configuration set to write errors to the log, not the screen, btw.

How can I prevent this from happening again? Is this a bug?

Comments

ckclarke’s picture

ckclarke commented

Resubmitting this as a bug, as I don't think it's getting any attention as a support issue and this is fairly important.

chx’s picture

chx commented
Status: Active » Closed (duplicate)

http://drupal.org/node/62098 posting deliberate duplicates are not nice to say the least. What do you think, how many issue do we get each _hour_ ??