phpBB database user password caching problem

Get help with installation and running phpBB 3.1.x here. Please do not post bug reports, feature requests, or extension related questions here.
Scam Warning
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

NOTE: phpBB 3.1.x is at its End of Life stage and support will NOT be provided after July 1st, 2018.
Locked
User avatar
spider2012
Registered User
Posts: 49
Joined: Sat Jun 16, 2012 5:05 pm
Location: Hoboken, New Jersey in the United States
Contact:

phpBB database user password caching problem

Post by spider2012 » Thu Oct 30, 2014 5:12 am

Hello,

I've discovered that a character or set of characters within password of my phpBB database user lead to access denied SQL failure, after phpBB displays the initial phpBB page successfully.

Then, I've manually emptied cache/ folder, and was able to display one forum page successfully, before getting the SQL access denied message.

Once, I've changed password -- the problem goes away.
I was able to reproduce the problem by reverting to the original password.

Please note, that the original password did not cause any problem for phpBB 3.0.12.

Thank you!
Conversions and Calculations
http://www.aqua-calc.com

User avatar
Oyabun1
Former Team Member
Posts: 23162
Joined: Sun May 17, 2009 1:05 pm
Location: Australia
Name: Bill

Re: phpBB database user password caching problem

Post by Oyabun1 » Thu Oct 30, 2014 11:37 am

Which database management system? What is the password that doesn't work?
                      Support Request Template
3.0.x: Knowledge Base Styles Support MOD Requests
3.1.x: Knowledge BaseStyles SupportExtension Requests

User avatar
spider2012
Registered User
Posts: 49
Joined: Sat Jun 16, 2012 5:05 pm
Location: Hoboken, New Jersey in the United States
Contact:

Re: phpBB database user password caching problem

Post by spider2012 » Thu Oct 30, 2014 1:42 pm

MySQL database, and mysqli interface.
The problematic password is

Code: Select all

Lh3oy9Qi%%^4
Conversions and Calculations
http://www.aqua-calc.com

User avatar
spider2012
Registered User
Posts: 49
Joined: Sat Jun 16, 2012 5:05 pm
Location: Hoboken, New Jersey in the United States
Contact:

Re: phpBB database user password caching problem

Post by spider2012 » Thu Oct 30, 2014 8:12 pm

Conversions and Calculations
http://www.aqua-calc.com

User avatar
T0ny
Registered User
Posts: 1383
Joined: Sun Jan 29, 2006 8:42 pm
Location: Lancashire
Name: Tony

Re: phpBB database user password caching problem

Post by T0ny » Thu Oct 30, 2014 8:48 pm

I've set a phpBB3.1.0 install up with the same database password and can confirm what you are seeing.

The problem goes away after uncommenting @define('DEBUG_CONTAINER', true); in config.php

The cause appears to be in cache/container_dotslash.php which contains the following:

Code: Select all

	protected function getDbal_Conn_DriverService()
    {
        $this->services['dbal.conn.driver'] = $instance = new \phpbb\db\driver\mysqli();

        $instance->sql_connect('127.0.0.1', 'phpbb3', 'Lh3oy9Qi%^4', 'phpbb3', '', false, false);

        return $instance;
    }
Note the password stored there has only one percentage sign in it, unlike the one in config.php

Code: Select all

$dbpasswd = 'Lh3oy9Qi%%^4';

User avatar
spider2012
Registered User
Posts: 49
Joined: Sat Jun 16, 2012 5:05 pm
Location: Hoboken, New Jersey in the United States
Contact:

Re: phpBB database user password caching problem

Post by spider2012 » Thu Oct 30, 2014 9:22 pm

T0ny,

I'm going to update the bug report with reference to your post.

Thank you !
Conversions and Calculations
http://www.aqua-calc.com

Locked

Return to “[3.1.x] Support Forum”