summaryrefslogtreecommitdiff
path: root/plugins/password
diff options
context:
space:
mode:
authorThomas Bruederli <thomas@roundcube.net>2014-02-03 15:34:55 +0100
committerThomas Bruederli <thomas@roundcube.net>2014-05-12 09:00:13 +0200
commit0d9ccfd8f76170adfeaa104668fce0e0b4f66a33 (patch)
tree59df04bd56b7cc3928e769cf7f4abe08bc9ccd6f /plugins/password
parentc94971bc6fe68c777cc066f51a7d88cc1149813f (diff)
Don't EVER log passwords
Diffstat (limited to 'plugins/password')
-rw-r--r--plugins/password/drivers/ldap_simple.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/plugins/password/drivers/ldap_simple.php b/plugins/password/drivers/ldap_simple.php
index 47e3b07de..3e167ea5b 100644
--- a/plugins/password/drivers/ldap_simple.php
+++ b/plugins/password/drivers/ldap_simple.php
@@ -113,7 +113,7 @@ class rcube_ldap_simple_password
return PASSWORD_CRYPT_ERROR;
}
- $this->_debug("C: Bind $binddn [pass: $bindpw]");
+ $this->_debug("C: Bind $binddn, pass: **** [" . strlen($bindpw) . "]");
// Bind
if (!ldap_bind($ds, $binddn, $bindpw)) {
@@ -175,7 +175,7 @@ class rcube_ldap_simple_password
return null;
}
- $this->_debug("C: Bind $search_user [pass: $search_pass]");
+ $this->_debug("C: Bind $search_user, pass: **** [" . strlen($search_pass) . "]");
// Bind
if (!ldap_bind($ds, $search_user, $search_pass)) {