mod_auth_internal_plain: Don't log passwords, even at debug level
authorMatthew Wild <mwild1@gmail.com>
Tue, 23 Apr 2013 15:13:51 +0100
changeset 5509 76744bda82be
parent 5508 b7a8615e2be1
child 5510 3758898cefdd
mod_auth_internal_plain: Don't log passwords, even at debug level
plugins/mod_auth_internal_plain.lua
--- a/plugins/mod_auth_internal_plain.lua	Mon Apr 22 12:35:52 2013 +0100
+++ b/plugins/mod_auth_internal_plain.lua	Tue Apr 23 15:13:51 2013 +0100
@@ -19,7 +19,7 @@
 log("debug", "initializing internal_plain authentication provider for host '%s'", host);
 
 function provider.test_password(username, password)
-	log("debug", "test password '%s' for user %s at host %s", password, username, host);
+	log("debug", "test password for user %s at host %s", username, host);
 	local credentials = accounts:get(username) or {};
 
 	if password == credentials.password then