Telecoms Sans Frontieres MySQL errors

I was going to say how impressed I am that the Telecoms Sans Frontieres (TSF) was already rushing to restore connectivity in Peru, but then I noticed some troubling issues on the default page of their website:

Warning: mysql_connect() [function.mysql-connect]: Access denied for user: ‘tsfi@10.0.70.8’ (Using password: YES) in /home.10.4/tsfi/www/html_e/index_gb.php on line 1

Warning: mysql_select_db(): supplied argument is not a valid MySQL-Link resource in /home.10.4/tsfi/www/html_e/index_gb.php on line 2

Warning: mysql_query() [function.mysql-query]: Can’t connect to local MySQL server through socket ‘/var/run/mysqld/mysqld.sock’ (2) in /home.10.4/tsfi/www/html_e/index_gb.php on line 9

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home.10.4/tsfi/www/html_e/index_gb.php on line 9

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home.10.4/tsfi/www/html_e/index_gb.php on line 10

First, the errors should not go to the browser, especially with IP addresses, directory paths and usernames. There’s no need for the general user to see those details.

Second, it must be embarassing for an IT crisis group trying to restore services to have a website crisis of their own, no?

Perhaps it is time someone created an Information Security Sans Frontieres group to help ensure the availability of systems and perhaps even privacy of data for disaster areas and the teams working there…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.