Aol.com configuration file disclosure
Aol.com configuration file disclosure, mysql user password leaked
Aol.com configuration file disclosure
http://videosection.video.aol.com/application/configs/application.ini
[Production]
PhpSettings. display_startup_errors = "0"
PhpSettings. display_errors = "0"
Export depaths. library = APPLICATION_PATH "/../library"
Bootstrap. path = APPLICATION_PATH "/Bootstrap. php"
Bootstrap. class = "Bootstrap"
Appnamespace = "Application"
Resources. frontController. controllerDirectory = APPLICATION_PATH "/controllers"
Resources. frontController. params. displayExceptions = "0"
Resources. db. adapter = "pdo_mysql"
Resources. db. params. dbname = "aolvs"
Resources. db. params. host = "fmvhubdb-l01.video.aol.com"
Resources. db. params. username = "aolvs_rw"
Resources. db. params. password = "knewDBA4u"
Resources. db. params. isdefaulttableadapter = true
Constants. DEBUG_MODE = false
Constants. SERVER_PATH = "http://videosection.video.aol.com /"
Constants. CACHE_PATH = APPLICATION_PATH "/../cache"
; Constants. THUMBS_PATH = APPLICATION_PATH "/../thumbnails"
; Constants. STATIC_PATH = APPLICATION_PATH "/../static"
Constants. THUMBS_PATH = "/fmvhubNAS/thumbnails"
Constants. STATIC_PATH = "/fmvhubNAS/static"
...
Solution:
No direct HTTP access to this. ini file.