{"action":"closed","issue":{"url":"https://api.github.com/repos/doctrine/doctrine2/issues/7086","repository_url":"https://api.github.com/repos/doctrine/doctrine2","labels_url":"https://api.github.com/repos/doctrine/doctrine2/issues/7086/labels{/name}","comments_url":"https://api.github.com/repos/doctrine/doctrine2/issues/7086/comments","events_url":"https://api.github.com/repos/doctrine/doctrine2/issues/7086/events","html_url":"https://github.com/doctrine/doctrine2/issues/7086","id":299382688,"number":7086,"title":"DB password stored in cache when using result cache","user":{"login":"fullbl","id":8133457,"avatar_url":"https://avatars2.githubusercontent.com/u/8133457?v=4","gravatar_id":"","url":"https://api.github.com/users/fullbl","html_url":"https://github.com/fullbl","followers_url":"https://api.github.com/users/fullbl/followers","following_url":"https://api.github.com/users/fullbl/following{/other_user}","gists_url":"https://api.github.com/users/fullbl/gists{/gist_id}","starred_url":"https://api.github.com/users/fullbl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fullbl/subscriptions","organizations_url":"https://api.github.com/users/fullbl/orgs","repos_url":"https://api.github.com/users/fullbl/repos","events_url":"https://api.github.com/users/fullbl/events{/privacy}","received_events_url":"https://api.github.com/users/fullbl/received_events","type":"User","site_admin":false},"labels":[{"id":296201351,"url":"https://api.github.com/repos/doctrine/doctrine2/labels/Improvement","name":"Improvement","color":"006b75","default":false},{"id":510994953,"url":"https://api.github.com/repos/doctrine/doctrine2/labels/Question","name":"Question","color":"d4c5f9","default":false}],"state":"closed","locked":false,"assignee":{"login":"Ocramius","id":154256,"avatar_url":"https://avatars2.githubusercontent.com/u/154256?v=4","gravatar_id":"","url":"https://api.github.com/users/Ocramius","html_url":"https://github.com/Ocramius","followers_url":"https://api.github.com/users/Ocramius/followers","following_url":"https://api.github.com/users/Ocramius/following{/other_user}","gists_url":"https://api.github.com/users/Ocramius/gists{/gist_id}","starred_url":"https://api.github.com/users/Ocramius/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ocramius/subscriptions","organizations_url":"https://api.github.com/users/Ocramius/orgs","repos_url":"https://api.github.com/users/Ocramius/repos","events_url":"https://api.github.com/users/Ocramius/events{/privacy}","received_events_url":"https://api.github.com/users/Ocramius/received_events","type":"User","site_admin":false},"assignees":[{"login":"Ocramius","id":154256,"avatar_url":"https://avatars2.githubusercontent.com/u/154256?v=4","gravatar_id":"","url":"https://api.github.com/users/Ocramius","html_url":"https://github.com/Ocramius","followers_url":"https://api.github.com/users/Ocramius/followers","following_url":"https://api.github.com/users/Ocramius/following{/other_user}","gists_url":"https://api.github.com/users/Ocramius/gists{/gist_id}","starred_url":"https://api.github.com/users/Ocramius/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ocramius/subscriptions","organizations_url":"https://api.github.com/users/Ocramius/orgs","repos_url":"https://api.github.com/users/Ocramius/repos","events_url":"https://api.github.com/users/Ocramius/events{/privacy}","received_events_url":"https://api.github.com/users/Ocramius/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/doctrine/doctrine2/milestones/67","html_url":"https://github.com/doctrine/doctrine2/milestone/67","labels_url":"https://api.github.com/repos/doctrine/doctrine2/milestones/67/labels","id":2941605,"number":67,"title":"2.7.0","description":null,"creator":{"login":"lcobucci","id":201963,"avatar_url":"https://avatars2.githubusercontent.com/u/201963?v=4","gravatar_id":"","url":"https://api.github.com/users/lcobucci","html_url":"https://github.com/lcobucci","followers_url":"https://api.github.com/users/lcobucci/followers","following_url":"https://api.github.com/users/lcobucci/following{/other_user}","gists_url":"https://api.github.com/users/lcobucci/gists{/gist_id}","starred_url":"https://api.github.com/users/lcobucci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lcobucci/subscriptions","organizations_url":"https://api.github.com/users/lcobucci/orgs","repos_url":"https://api.github.com/users/lcobucci/repos","events_url":"https://api.github.com/users/lcobucci/events{/privacy}","received_events_url":"https://api.github.com/users/lcobucci/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":2,"state":"open","created_at":"2017-11-27T23:00:29Z","updated_at":"2018-03-29T13:09:48Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2018-02-22T14:52:07Z","updated_at":"2018-03-29T13:09:48Z","closed_at":"2018-03-29T13:09:48Z","author_association":"CONTRIBUTOR","body":"Hi!\r\nToday I was debugging some problems with result cache and I noticed that data is saved like this:\r\n\r\n`connectionParams=a:12:{s:4:\\\"host\\\";s:9:\\\"localhost\\\";s:4:\\\"port\\\";N;s:6:\\\"dbname\\\";s:16:\\\"__DBNAME__\\\";s:4:\\\"user\\\";s:7:\\\"__USER__\\\";s:8:\\\"password\\\";s:20:\\\"__!!!REAL_PASSWORD!!!__\\\";s:7:\\\"charset\\\";s:4:\\\"UTF8\\\";s:6:\\\"driver\\\";s:9:\\\"pdo_mysql\\\";s:13:\\\"driverOptions\\\";a:1:{s:20:\\\"x_reconnect_attempts\\\";i:3;}`\r\n\r\nobviously, everything that starts and ends with __ is the real variable, so also password is saved in clear.\r\n\r\nIsn't it a security issue? Shouldn't it be hashed?"}}
{"actor":{"display_login":"Ocramius"}}