diff --git a/reference/mysqli/mysqli/construct.xml b/reference/mysqli/mysqli/construct.xml
index bbb9d519c3bb..e5bd27b95405 100644
--- a/reference/mysqli/mysqli/construct.xml
+++ b/reference/mysqli/mysqli/construct.xml
@@ -15,7 +15,7 @@
public mysqli::__construct
stringnullhostname&null;
stringnullusername&null;
- stringnullpassword&null;
+ #[\SensitiveParameter]stringnullpassword&null;
stringnulldatabase&null;
intnullport&null;
stringnullsocket&null;
@@ -24,6 +24,7 @@
public boolmysqli::connect
stringnullhostname&null;
stringnullusername&null;
+ stringnull#[\SensitiveParameter]&null;
stringnullpassword&null;
stringnulldatabase&null;
intnullport&null;
@@ -34,6 +35,7 @@
mysqlifalsemysqli_connect
stringnullhostname&null;
stringnullusername&null;
+ stringnull#[\SensitiveParameter]&null;
stringnullpassword&null;
stringnulldatabase&null;
intnullport&null;
@@ -304,6 +306,12 @@ if (mysqli_errno($mysqli)) {
variable won't be available and PHP will have problems loading Winsock.
+
+
+ $password parameter is guarded by #[\SensitiveParameter]
+ attribute, so it won't appear in the stack trace.
+
+