Db Full Visual Processing

Some people have been talking about on UNITY, that on a database error, Dolphin may display more information than desired to a user of your Dolphin site.

This information can contain system settings / paths / and so on that is best not shared with an untrusted user.

This information display is easily controlled by checking, and changing, if needed, a value in the database include file.

Below are instructions including what file to check, and what to change, to avoid this situation.

Dolphin 6.0.x and 6.1.x (inc/db.inc.php)
Dolphin 7.0.x (inc/classes/BxDolDb.php)


Look for the value, near the top of the file, like:

define( 'DB_FULL_VISUAL_PROCESSING', true );

It should be set to:

define( 'DB_FULL_VISUAL_PROCESSING', false );

Making this change will prevent users from seeing debug information (some sensitive) in the event your site has a database error.

Warm regards,
UFO360

Post Reply - if you going to help - No for - bla bla bla bla
Quote · 29 May 2010

This security flaw is only in Dolphin 7. Dolphin 6.1 web sites are completely safe and need not worry, as their information is hashed-out.

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 29 May 2010
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.