Re: [BUGS] BUG #10250: pgAdmin III 1.16.1 stores unescaped plaintext password

* Heikki Linnakangas (hlinnakangas@vmware.com) wrote:
> (forwarding to pgadmin-hackers)

Ah.

> On 05/07/2014 06:44 PM, Stephen Frost wrote:
> >* dlo@isam.kiwi (dlo@isam.kiwi) wrote:
> >>but when the credential contains the delimiter (colon) it fails to be
> >>read back out and app responds with "invalid credentials".
> >>
> >>x.x.x.x:5432:*:username:password:with:colons
> >
> >Per the fine documentation, you need to escape any such usage with a
> >backslash.  Please review:
>
> Stephen, you missed the context. pgadmin3 saves .pgpass, when you
> check the "store password" checkbox in the connection dialog. And
> apparantly pgadmin3 doesn't do that escaping properly.

Wow, that's pretty rough.  Hopefully they'll be able to fix it soon. :)

    Thanks,

        Stephen