mod_auth_internal_plain: Don't log passwords, even at debug level

This commit is contained in:
Matthew Wild 2013-04-23 15:13:51 +01:00
parent 4602591c38
commit 3f91421f0c

View file

@ -19,7 +19,7 @@ local provider = {};
log("debug", "initializing internal_plain authentication provider for host '%s'", host);
function provider.test_password(username, password)
log("debug", "test password '%s' for user %s at host %s", password, username, host);
log("debug", "test password for user %s at host %s", username, host);
local credentials = accounts:get(username) or {};
if password == credentials.password then