Re: BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password

* Heikki Linnakangas (hlinnakangas(at)vmware(dot)com) wrote:
> (forwarding to pgadmin-hackers)

Ah.

> On 05/07/2014 06:44 PM, Stephen Frost wrote:
> >* dlo(at)isam(dot)kiwi (dlo(at)isam(dot)kiwi) wrote:
> >>but when the credential contains the delimiter (colon) it fails to be
> >>read back out and app responds with "invalid credentials".
> >>
> >>x.x.x.x:5432:*:username:password:with:colons
> >
> >Per the fine documentation, you need to escape any such usage with a
> >backslash. Please review:
>
> Stephen, you missed the context. pgadmin3 saves .pgpass, when you
> check the "store password" checkbox in the connection dialog. And
> apparantly pgadmin3 doesn't do that escaping properly.

Wow, that's pretty rough. Hopefully they'll be able to fix it soon. :)

Thanks,

Stephen