[PHP-NOTES] note 130626 added to class.sensitiveparametervalue

[email protected] ("[email protected]") Mon, 26 Jan 2026 09:54:38 +0000
Newsgroups php.notes
Message-ID <[email protected]>
While this class protects against accidental echo and/or var_dump, it does NOT protect against some other php functions:

<?php
$value = new SensitiveParameterValue('MyPassword');

var_dump($value); // Safe

echo $value; // PHP error: could not be converted to string

var_dump(get_mangled_object_vars($value)); // Password exposed!!!
?>
----
Server IP: 206.189.2.9
Probable Submitter: 95.98.156.14
----
Manual Page -- https://php.net/manual/en/class.sensitiveparametervalue.php
Edit        -- https://main.php.net/note/edit/130626
Del: integrated  -- https://main.php.net/note/delete/130626/integrated
Del: useless     -- https://main.php.net/note/delete/130626/useless
Del: bad code    -- https://main.php.net/note/delete/130626/bad+code
Del: spam        -- https://main.php.net/note/delete/130626/spam
Del: non-english -- https://main.php.net/note/delete/130626/non-english
Del: in docs     -- https://main.php.net/note/delete/130626/in+docs
Del: other reasons-- https://main.php.net/note/delete/130626
Reject      -- https://main.php.net/note/reject/130626
Search      -- https://main.php.net/manage/user-notes.php