From e20fd76cab04c912a4d02df7102c575a83bbc42a Mon Sep 17 00:00:00 2001 From: "John \"Elwin\" Edwards" Date: Sat, 31 Jan 2015 18:13:24 -0500 Subject: [PATCH] Stop printing credentials in the logfile. This was nice for debugging, but could lead to security problems. --- rlgwebd.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rlgwebd.js b/rlgwebd.js index b592bd1..f7cfed1 100755 --- a/rlgwebd.js +++ b/rlgwebd.js @@ -615,7 +615,7 @@ function login(req, res, formdata) { var reply = {"t": "l", "k": lkey, "u": username}; res.write(JSON.stringify(reply)); res.end(); - tslog("%s has logged in (key %s)", username, lkey); + tslog("%s has logged in", username); return; } /* Launch the sqlickrypt utility to check the password. */