From dc97d4f36551c44f309eaa79e70bc130a553eb8f Mon Sep 17 00:00:00 2001 From: andryyy Date: Thu, 9 Jan 2020 19:15:09 +0100 Subject: [PATCH] [Web] Hide app passwords from logs --- data/web/inc/functions.app_passwd.inc.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/data/web/inc/functions.app_passwd.inc.php b/data/web/inc/functions.app_passwd.inc.php index 7c779b0a..9b956659 100644 --- a/data/web/inc/functions.app_passwd.inc.php +++ b/data/web/inc/functions.app_passwd.inc.php @@ -3,6 +3,8 @@ function app_passwd($_action, $_data = null) { global $pdo; global $lang; $_data_log = $_data; + !isset($_data_log['app_passwd']) ?: $_data_log['app_passwd'] = '*'; + !isset($_data_log['app_passwd2']) ?: $_data_log['app_passwd2'] = '*'; if (isset($_data['username']) && filter_var($_data['username'], FILTER_VALIDATE_EMAIL)) { if (!hasMailboxObjectAccess($_SESSION['mailcow_cc_username'], $_SESSION['mailcow_cc_role'], $_data['username'])) { $_SESSION['return'][] = array(