Hacker News new | ask | show | jobs
by Fuzzwah 3790 days ago
I'm going to use this as a place to mention how ridiculous it seems to me that drupal displays the database details on the error page:

> the username is drupal and the database server is localhost

I'm sure this isn't a huge information leak, but it still seems kind of silly to me.

3 comments

While I am not familiar personally with Drupal, this seems like a development feature that is supposed to be turned off in production.
I used to use Drupal. At this point I never, ever recommend people use it.

Pregenerating most of your pages a-la Jeckyll is just so much better that I don't know why anyone ever thought generating all of their pages with PHP was a good idea.

I remember thinking it was a good idea, to be honest. But at this point I look back and see how mistaken I was.

To help people trying to Google/understand the parent comment, it is spelled Jekyll.
Foo. Too late to edit.

Thanks for the clarification.

It's always a pain to link to Google also, they leak information in the address that you copy from the address bar...