Notice: Undefined index: HTTP_ACCEPT_LANGUAGE in /home/maillink.ch/bugs/htdocs/flyspray-1.0/includes/i18n.inc.php on line 46 FS#193 : password logging

mod_auth_mysql

  • Status Assigned
  • Percent Complete
    0%
  • Task Type Feature Request
  • Category Backend / Core
  • Assigned To
    Ueli Heuer
  • Operating System
  • Severity Low
  • Priority Medium
  • Reported Version
  • Due in Version 1.12
  • Due Date Undecided
  • Votes 0
  • Private
Attached to Project: mod_auth_mysql
Opened by Ueli Heuer - 27.02.2016

FS#193 - password logging

Tags:

I recently moved from the older SF “mod_auth_mysql” to yours and it works well. One thing I noticed while troubleshooting is that there’s no way to suppress password logging. As it stands, if there’s a misconfiguration or an incorrect user/pass entered, the full password is recorded in the apache error log.

I tried entering this in the bug tracker, but could not find a way to create a new account.

Would it be possible to consider a config option (default off) to log passwords?

Thanks,

Charles

Ueli Heuer

27.02.2016 09:19

I think this is possible, I’ll have to think about the name of that parameter. maybe AuthMySQLLogFailedPassword? what do you think?

Loading...

Warning: Invalid argument supplied for foreach() in /home/maillink.ch/bugs/htdocs/flyspray-1.0/themes/CleanFS/templates/details.tabs.efforttracking.tpl on line 19
Date User Effort (H:M)