Changeset

5509:76744bda82be

mod_auth_internal_plain: Don't log passwords, even at debug level
author Matthew Wild <mwild1@gmail.com>
date Tue, 23 Apr 2013 15:13:51 +0100
parents 5508:b7a8615e2be1
children 5510:3758898cefdd
files plugins/mod_auth_internal_plain.lua
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/plugins/mod_auth_internal_plain.lua	Mon Apr 22 12:35:52 2013 +0100
+++ b/plugins/mod_auth_internal_plain.lua	Tue Apr 23 15:13:51 2013 +0100
@@ -19,7 +19,7 @@
 log("debug", "initializing internal_plain authentication provider for host '%s'", host);
 
 function provider.test_password(username, password)
-	log("debug", "test password '%s' for user %s at host %s", password, username, host);
+	log("debug", "test password for user %s at host %s", username, host);
 	local credentials = accounts:get(username) or {};
 
 	if password == credentials.password then