---
title: "Important: HIS service credentials are blinded in the backend"
manual: "HIS Connector"
version: "main"
source: "Changelog/1.0/Important-BlindHisServiceCredentials.rst"
modified: "2026-09-15T12:04:13+00:00"
---

# Important: HIS service credentials are blinded in the backend

## Description

The HIS SOAP service URL, username and password configured in the extension
configuration (`$GLOBALS['TYPO3_CONF_VARS']['EXTENSIONS']['his_connector']['soap']`)
are no longer displayed in clear text in the **System > Configuration**
backend module provided by the TYPO3 system extension `typo3/cms-lowlevel`.

The options `urlPrefix`, `username` and `password` are displayed as
`******` instead, like TYPO3 does for the database connection credentials.
The `timeout` option is not security sensitive and stays visible.

## Impact

The HIS service credentials can no longer be read by backend administrators
through the configuration module. System maintainers can still view and change
them in the extension configuration of the **Settings** module.