Notice: Undefined index: HTTP_ACCEPT_LANGUAGE in /home/ on line 46 FS#193 : password logging


  • Status Assigned
  • Percent Complete
  • Task Type Feature Request
  • Category Backend / Core
  • Assigned To
    Ueli Heuer
  • Operating System
  • Severity Low
  • Priority Medium
  • Reported Version
  • Due in Version 1.12
  • Due Date Undecided
  • Votes 0
  • Private
Attached to Project: mod_auth_mysql
Opened by Ueli Heuer - 27.02.2016

FS#193 - password logging


I recently moved from the older SF “mod_auth_mysql” to yours and it works well. One thing I noticed while troubleshooting is that there’s no way to suppress password logging. As it stands, if there’s a misconfiguration or an incorrect user/pass entered, the full password is recorded in the apache error log.

I tried entering this in the bug tracker, but could not find a way to create a new account.

Would it be possible to consider a config option (default off) to log passwords?



Ueli Heuer

27.02.2016 09:19

I think this is possible, I’ll have to think about the name of that parameter. maybe AuthMySQLLogFailedPassword? what do you think?


Warning: Invalid argument supplied for foreach() in /home/ on line 19
Date User Effort (H:M)