Re: sql-mode password display

[Kevin Rodgers <ihs_4664@yahoo.com>]

rb wrote:
 > When I use sql mode:
 >
 > M-x sql-mysql, then follow prompts,
 >
 > I get the interactive sql buffer which works very well for me. The only
 > problem is that when I list the processes, the mysql process shows my
 > password, and I would like to know if there is something I can do to
 > conceal it?
 >
 > rb@antonio 102% ps -ef | grep sql
 >       rb      29562      29372  0 08:44:27 pts/4   0:00 grep sql
 >       rb      29717      15897  0 08:43:34 pts/8   0:00
 >       /usr/freeware/bin/mysql --user=rb --password=my_password
 >       --host=sanmarco test

What happens if you don't enter your password when prompted by M-x
sql-mysql, i.e. just type RET?

 > I was trying to find wheter there was a customizable variable to
 > conceal/display password and with M-x customize-apropos, I discovered
 > that the password was displayed in the customization buffer as well:
 >
 > Sql Password: Hide my_password
 >    State: this option has been changed outside the customize buffer.
 > Default password. More
 > Parent groups: Sql

,----[ C-h v sql-password RET ]
| sql-password's value is ""
|
| Documentation:
| *Default password.
|
| Storing your password in a textfile such as ~/.emacs could be dangerous.
| Customizing your password will store it in your ~/.emacs file.
|
| You can customize this variable.
|
| Defined in `sql'.
`----

sql-password was changed outside of Customize by sql-get-login.  But if
you just respond with RET it will remain "".

 > If I start an ineractive mysql session at the command line in an xwsh
 > shell, I get the following (password not displayed):
 >
 > rb@antonio 101% ps -ef | grep sql
 >       rb      29598      29535  0 08:31:14 pts/6   0:00 mysql -h
 >       sanmarco -u rb -p test
 >
 > Also, working in shell-mode within emacs, to process a batch file, my
 > password is displayed in the *shell* buffer, and is retained in the
 > command history list.
 >
 > From Emacs shell buffer:
 >
 > rb@antonio 98% mysql -vv -h sanmarco -u rb -p < dbs.sql > dbs.out0222
 > mysql -vv -h sanmarco -u rb -p < dbs.sql > dbs.out0222
 > Enter password: my_password
 >
 > Within the shell, any other commands requiring a password (ssh, rlogin,
 > su, etc), the password is properly not displayed.

,----[ C-h v comint-password-prompt-regexp RET ]
| comint-password-prompt-regexp's value is
| "\\(\\([Oo]ld \\|[Nn]ew \\|'s \\|login \\|Kerberos \\|CVS \\|UNIX \\| 
SMB \\|^\\)[Pp]assword\\( (again)\\)?\\|pass 
phrase\\|\\(Enter\\|Repeat\\) passphrase\\)\\( for [^:]+\\)?:\\s *\\'"
|
| Documentation:
| *Regexp matching prompts for passwords in the inferior process.
| This is used by `comint-watch-for-password-prompt'.
|
| You can customize this variable.
|
| Defined in `comint'.
`----

M-: (string-match comint-password-prompt-regexp "Enter password: ") RET
returns nil, so I would try

(setq comint-password-prompt-regexp
       "\\(\\([Oo]ld \\|[Nn]ew \\|'s \\|login \\|Kerberos \\|CVS \\|UNIX 
\\| SMB \\|^\\)[Pp]assword\\( (again)\\)?\\|pass 
phrase\\|\\(Enter\\|Repeat\\) pass ?\\(word\\|phrase\\)\\)\\( for 
[^:]+\\)?:\\s *\\'")

-- 
Kevin Rodgers