# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1366726431 -3600
# Node ID 76744bda82bebc53d7894f7a4c7b4361a69d8ddd
# Parent  b7a8615e2be1a600c5743cf4175a8c2e2cc6bc4b
mod_auth_internal_plain: Don't log passwords, even at debug level

diff -r b7a8615e2be1 -r 76744bda82be plugins/mod_auth_internal_plain.lua
--- a/plugins/mod_auth_internal_plain.lua	Mon Apr 22 12:35:52 2013 +0100
+++ b/plugins/mod_auth_internal_plain.lua	Tue Apr 23 15:13:51 2013 +0100
@@ -19,7 +19,7 @@
 log("debug", "initializing internal_plain authentication provider for host '%s'", host);
 
 function provider.test_password(username, password)
-	log("debug", "test password '%s' for user %s at host %s", password, username, host);
+	log("debug", "test password for user %s at host %s", username, host);
 	local credentials = accounts:get(username) or {};
 
 	if password == credentials.password then