[GH-ISSUE #16] Error handling #16

New issue

Closed

opened 2026-02-26 01:34:56 +03:00 by kerem · 1 comment

kerem commented

2026-02-26 01:34:56 +03:00

Owner

Originally created by @kwilliams on GitHub (Nov 6, 2013).
Original GitHub issue: https://github.com/JLiscom/OpenNote/issues/16

The demo has a nasty information disclosure problem:

Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42000] [1044] Access denied for user 'starlgco_Note'@'localhost' to database 'starlgco_OpenNote'' in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php:50 Stack trace: #0 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(50): PDO->__construct('mysql:host=loca...', 'starlgco_Note', 'Kt,Lp5D]UhUW') #1 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(82): Core::mysqlConnect() #2 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/Authenticater.php(17): Core::query('SELECT COUNT(*)...', Array) #3 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/ajax.php(14): Authenticater::checkAvailability('test123') #4 {main} thrown in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php on line 50

Originally created by @kwilliams on GitHub (Nov 6, 2013). Original GitHub issue: https://github.com/JLiscom/OpenNote/issues/16 The demo has a nasty information disclosure problem: ``` Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42000] [1044] Access denied for user 'starlgco_Note'@'localhost' to database 'starlgco_OpenNote'' in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php:50 Stack trace: #0 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(50): PDO->__construct('mysql:host=loca...', 'starlgco_Note', 'Kt,Lp5D]UhUW') #1 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php(82): Core::mysqlConnect() #2 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/Authenticater.php(17): Core::query('SELECT COUNT(*)...', Array) #3 /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/login/ajax.php(14): Authenticater::checkAvailability('test123') #4 {main} thrown in /home4/starlgco/public_html/apps/OpenNote/OpenNote/modules/core/Common.php on line 50 ```