From 4380fb12c97629c27f22648cb6e45b115e62eb7e Mon Sep 17 00:00:00 2001 From: Andrew McMillan Date: Tue, 30 Nov 2010 12:36:40 +1300 Subject: [PATCH] Hide authorization headers in logging. Signed-off-by: Andrew McMillan --- inc/CalDAVRequest.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/inc/CalDAVRequest.php b/inc/CalDAVRequest.php index fa580f7d..5d1ec9ea 100644 --- a/inc/CalDAVRequest.php +++ b/inc/CalDAVRequest.php @@ -146,6 +146,9 @@ class CalDAVRequest dbg_error_log( "LOG ", "***************** Request Header ****************" ); dbg_error_log( "LOG ", "%s %s", $_SERVER['REQUEST_METHOD'], $_SERVER['REQUEST_URI'] ); foreach( $lines AS $k => $v ) { + if ( $k == 'Authorization' ) + dbg_error_log( "LOG headers", "-->%s: %s", $k, 'Delicious tasty password eaten by debugging monster!' ); + else dbg_error_log( "LOG headers", "-->%s: %s", $k, $v ); } dbg_error_log( "LOG ", "******************** Request ********************" );