[CRM-7631] information disclosure: watchdog logging reveals user/pass/key used to call bin scripts - CiviCRM Issue Tracker

Details

Type: Bug
Status: Done/Fixed
Priority: Blocker
Resolution: Won't Fix
Affects Version/s: 4.0.0
Fix Version/s: 4.0.0
Component/s: Core CiviCRM
Labels:
None

Description

Title says it all. I get messages like the following in watchdog:

http://drupal-head.local/sites/all/modules/civicrm/drupal/../bin/UpdateAddress.php?name=foo&pass=bar&key=longmd5string&start=20&end=101

Attachments

Activity

People

Assignee:

Donald A. Lobo

Reporter:

dave hansen-lange

Votes:

0 Vote for this issue

Watchers:

0 Start watching this issue

Dates

Created:

2011-02-25 9:24

Updated:

2011-03-02 8:45

Resolved:

2011-02-25 17:35