[xdebug-general] Re: excluding code or variables possible?

Sorry for offtopic, but it's strange that you do not trust your own
developers. And, in fact, they can do you more harm than just stealing
database password (which is easy to change, by the way, and you also can
restrict the access to the database by a list of IP addresses).

Developers could also have their own copy of database with passwords
managed on their own. That's not always possible, I know, but in many cases
that's an option.

2012/6/25 Werner Flamme <werner.flamme[@]ufz.de>

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> for a distributed development xdebug seems to be too good :-). It
> looks at every single line of code and at every variable...
>
> In this environment it would be nice, if xdebug would not look at some
> functions and at some variables, because - if it does - every
> developer can see the secret passwords for the databese connections...
>
> Is there any possibility to tell xdebug *not* to show (or analyse) the
> content of certain functions and/or variables? For security reasons,
> this should be configured on the server side.
>
> Thanks in advance for reading the question :-)
>
> Regards,
> Werner
>
> - --
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.18 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk/oVeEACgkQk33Krq8b42OJhwCfXQNJUZI517LY4AG7RHsuP0P9
> ELEAnAy1SaZYzslVnHmFbTrqXBteGrVD
> =VHrV
> -----END PGP SIGNATURE-----
>
>
Received on Mon Jun 25 2012 - 14:39:39 BST