[wp-trac] [WordPress Trac] #62100: Database password shows up in browser if apache mysql module not loaded

[WordPress Trac]

#62100: Database password shows up in browser if apache mysql module not loaded
--------------------------+-----------------------------
 Reporter:  perryb        |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Database      |    Version:  6.6.2
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 This might be a niche issue but I thought I'd log it here in case anyone
 thought it might be worth investigating:

 While setting up a WordPress on AWS via a Docker image our Infrastructure
 Engineer came across an error message in their browser that exposed the
 database password.

 This was triggered by an issue with Terraform in AWS which resulted in the
 WP image mounting before Apache had been properly configured, so no mysql
 module and hence the error message.

 I'm not really up to speed with AWS so if you need more details I can get
 them from the engineer, they say that in turn this was triggered by a
 logged Terraform issue that appears to date back to 2017!

 I imagine this is likely an edge case but thought I'd log it in case
 anyone thought it might be more significant, or possible to trigger in
 another context.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62100>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform