Bug 227191: Change DBI->connect syntax so database password will not be revealed...

r=bbaetz
a=justdave

diff --git a/Bugzilla/DB.pm b/Bugzilla/DB.pm
index a766a6e04ba5558fa416f093c7c405367555bdc4..445e29500d50bc07299c1dcfd16fd2888ab06906 100644 (file)
--- a/Bugzilla/DB.pm
+++ b/Bugzilla/DB.pm
@@ -144,10 +144,12 @@ sub _connect {
     # connect using our known info to the specified db
     # Apache::DBI will cache this when using mod_perl
     my $dbh = DBI->connect($dsn,
-                           $db_user,
-                           $db_pass,
+                           '',
+                           '',
                            { RaiseError => 1,
                              PrintError => 0,
+                             Username => $db_user,
+                             Password => $db_pass,
                              ShowErrorStatement => 1,
                              HandleError => \&_handle_error,
                              FetchHashKeyName => 'NAME_lc',

diff --git a/checksetup.pl b/checksetup.pl
index c9ced42ecf0863595750be44a77857f5e5e82b4f..2ccf0d8a4d0cd5249380f71440a8885fc3396465 100755 (executable)
--- a/checksetup.pl
+++ b/checksetup.pl
@@ -246,7 +246,7 @@ my $modules = [
     }, 
     { 
         name => 'DBI', 
-        version => '1.32' 
+        version => '1.36' 
     }, 
     { 
         name => 'DBD::mysql',