From c516e5794ac37a36e4230f6f12b63ea09fc385cf Mon Sep 17 00:00:00 2001
From: Matthew Wild <mwild1@gmail.com>
Date: Tue, 23 Apr 2013 15:13:51 +0100
Subject: mod_auth_internal_plain: Don't log passwords, even at debug level
---
plugins/mod_auth_internal_plain.lua | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'plugins')
diff --git a/plugins/mod_auth_internal_plain.lua b/plugins/mod_auth_internal_plain.lua
index e411c4f7..d226fdbe 100644
--- a/plugins/mod_auth_internal_plain.lua
+++ b/plugins/mod_auth_internal_plain.lua
@@ -19,7 +19,7 @@ local provider = {};
log("debug", "initializing internal_plain authentication provider for host '%s'", host);
function provider.test_password(username, password)
- log("debug", "test password '%s' for user %s at host %s", password, username, host);
+ log("debug", "test password for user %s at host %s", username, host);
local credentials = accounts:get(username) or {};
if password == credentials.password then
--
cgit v1.2.3