Why does PDO print my password when the connection fails?

Question

I have a simple website where I establish a connection to a MySQL server using PDO.

$dbh = new PDO(\'mysql:host=localhost;dbname=DB;port=3306\',
                     


        

Answer 1

A simple workaround is to catch the PDOException thrown by the PDO constructor:

try {
    $dbh  =  new PDO('mysql:host=localhost;dbname=DB;port=3306', 'USER',
    'SECRET', array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES utf8"));
} catch (PDOException $e) {
    throw new Exception($e->getMessage());
}