Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the password file and the config file two separate files, for security #22764

Open
atom-box opened this issue Nov 15, 2024 · 0 comments
Open
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc.

Comments

@atom-box
Copy link
Contributor

atom-box commented Nov 15, 2024

When I am on a troubleshooting call or asking in an email: "Please show me what your configuration is", it is not uncommon for the person to inadvertently show me the password to their SQL database.

Is there an advantage to having the name and password stored there in the same file as mundane things like table display settings?

Is there a downside to separating them into two files?

@atom-box atom-box added Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. To Triage An issue awaiting triage by a Matomo core team member labels Nov 15, 2024
@des-innocraft des-innocraft removed the To Triage An issue awaiting triage by a Matomo core team member label Nov 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc.
Projects
None yet
Development

No branches or pull requests

2 participants