db password leaked in phpinfo()

[jamesstout]

I think it's from this line:

STD_PHP_INI_ENTRY("apm.mysql_pass", "", PHP_INI_PERDIR, OnUpdateString, mysql_db_pass, zend_apm_globals, apm_globals)

This results in:

I know I can disable phpinfo, but I wondered if there was a way to obfuscate or bcrypt it before output?

Thanks James

[MACscr]

yikes, this is definitely not good. especially when feeding into a central mysql server.