From 3f91421f0c6c561bcb7a72caec883c54123573b6 Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Tue, 23 Apr 2013 15:13:51 +0100 Subject: mod_auth_internal_plain: Don't log passwords, even at debug level --- plugins/mod_auth_internal_plain.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'plugins') diff --git a/plugins/mod_auth_internal_plain.lua b/plugins/mod_auth_internal_plain.lua index e411c4f7..d226fdbe 100644 --- a/plugins/mod_auth_internal_plain.lua +++ b/plugins/mod_auth_internal_plain.lua @@ -19,7 +19,7 @@ local provider = {}; log("debug", "initializing internal_plain authentication provider for host '%s'", host); function provider.test_password(username, password) - log("debug", "test password '%s' for user %s at host %s", password, username, host); + log("debug", "test password for user %s at host %s", username, host); local credentials = accounts:get(username) or {}; if password == credentials.password then -- cgit v1.2.3