- Status Closed
-
Assigned To
cbay - Private
Attached to Project: Security vulnerabilities
Opened by curiouscurrent - 27.08.2026
Last edited by cbay - 27.08.2026
Opened by curiouscurrent - 27.08.2026
Last edited by cbay - 27.08.2026
FS#464 - Exposed always data user configuration details
Always data cloud mysql datasource configuration and alwaysdata database configuration details of an Alwaysdata user exposed in the github repository.
So i logged in to https://phpmyadmin.alwaysdata.com/ and i was able to access the database.
The github repo where the credentials are exposed : https://github.com/sushma23nov/CineBook/blob/33bdee3d8c94bbf51156d78466b5682343bac9b6/database.md?plain=1#L28
Fix : Ask them to store it in .env and to add it in .gitignore , and create a config file seperately for storing the configuration details.
Loading...
Available keyboard shortcuts
- Alt + ⇧ Shift + l Login Dialog / Logout
- Alt + ⇧ Shift + a Add new task
- Alt + ⇧ Shift + m My searches
- Alt + ⇧ Shift + t focus taskid search
Tasklist
- o open selected task
- j move cursor down
- k move cursor up
Task Details
- n Next task
- p Previous task
- Alt + ⇧ Shift + e ↵ Enter Edit this task
- Alt + ⇧ Shift + w watch task
- Alt + ⇧ Shift + y Close Task
Task Editing
- Alt + ⇧ Shift + s save task
Hello,
Those are credentials from a customer, not ours.
Kind regards,
Cyril