Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:105886
To: internals@lists.php.net
Message-ID: <dabdf489-0d4a-5be9-8858-83448dfd5d9a@lsces.uk>
Date: Thu, 13 Jun 2019 08:35:10 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.6.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-GB
Content-Transfer-Encoding: 8bit
X-thewebhostserver-MailScanner-Information: Please contact the ISP for more information
X-thewebhostserver-MailScanner-ID: 1hbKGM-002yEz-La
X-thewebhostserver-MailScanner: Found to be clean
X-thewebhostserver-MailScanner-SpamCheck: 
X-thewebhostserver-MailScanner-From: lester@lsces.uk
X-Spam-Status: No
X-AuthUser: lester@lsces.uk
Subject: The real world ...
From: lester@lsces.uk (Lester Caine)

Seen in the wild ... company name sanitised

Warning: mysqli::mysqli(): (HY000/2002): No such file or directory in 
/home/888/public_html/system/library/db/mysqli.php on line 7

Fatal error: Uncaught exception 'Exception' with message 'Error: <br 
/>Error No: ' in /home/888/public_html/system/library/db/mysqli.php:10 
Stack trace: #0 
/home/888/public_html/system/nitro/core/nitro_db.php(29): 
DB\MySQLi->__construct('localhost', '888_4y65f5...', 
'J?vJr+j5iCju-bo...', '888_4y65f5...', '3306') #1 
/home/888/public_html/system/nitro/core/nitro_db.php(13): 
NitroDb->__construct('mysqli', 'localhost', '888_4y65f5...', 
'J?vJr+j5iCju-bo...', '888_4y65f5...', '3306') #2 
/home/888/public_html/system/storage/modification/system/library/db.php(11): 
NitroDb::getInstanceWithParams('mysqli', 'localhost', '888_4y65f5...', 
'J?vJr+j5iCju-bo...', '888_4y65f5...', '3306') #3 
/home/888/public_html/system/framework.php(36): 
DB->__construct('mysqli', 'localhost', '888_4y65f5...', 
'J?vJr+j5iCju-bo...', '888_4y65f5...', '3306') #4 
/home/888/public_html/vqmod/vqcache/vq2-system_startup.php(124): 
require_once('/home/888 in 
/home/888/public_html/system/library/db/mysqli.php on line 10
你的代码出错了：

I presume something has been updated that they have not been aware of 
since it's library file that triggered the warning ... but it's not the 
first time in recent years I've seen this sort of information on 
commercial sites and while my own clients just get white screens, those 
are created by the likes of Wordpress when 'automatic updates' happen.

Many years ago the response was "well don't update", but 'current 
practice' takes that out of OUR hands! So isn't it time that the 
triggering exceptions like this did produce a more user secure response 
to protect against leaks like this and provide a better alternative than 
a white screen?

In the case of this live site, I actually placed an order as it was only 
some links that triggered the fault, which may explain why they were not 
even aware there was a problem :( From the 'development' side, NitroDb-> 
should obviously be handling the problem anyway?

-- 
Lester Caine - G8HFL
-----------------------------
Contact - https://lsces.uk/wiki/Contact
L.S.Caine Electronic Services - https://lsces.uk
Model Engineers Digital Workshop - https://medw.uk
Rainbow Digital Media - https://rainbowdigitalmedia.uk