7.0.2
I have not been able to find a place to turn off debug. If the SQL server goes down or can not connect, the HTML server will serve up:
Script: full/path/to/ubbthreads.inc.php
Line#: 2089
SQL Error: Can't connect to local MySQL server through socket 'full/path/to/mysqld.sock' (2)
SQL Error #: 2002
Query: select t1.USER_DISPLAY_NAME,t1.USER_PASSWORD,t1.USER_SESSION_ID, t1.USER_MEMBERSHIP_LEVEL, t2.USER_TOTAL_PM, t1.USER_ID, t1.USER_IS_BANNED,t1.USER_IS_UNDERAGE, t2.USER_STYLE,t2.USER_HIDE_LEFT_COLUMN,t2.USER_HIDE_RIGHT_COLUMN from ubbt_USERS AS t1, ubbt_USER_PROFILE as t2 where t1.USER_ID = '' and t1.USER_ID = t2.USER_ID
Although not a problem if one is 100% sure their server is tight, showing the full path to the script shows dirrectory structure which could be used with other exploits. I suggest being able to turn off debug and replace with a message that says:
I am sorry, I can not connect to the data base at this time. Please try again later.
Or something along those lines.
