Don't log password to syslog
authorJamie Cameron <jcameron@webmin.com>
Fri, 20 Mar 2009 17:36:41 +0000 (17:36 +0000)
committerJamie Cameron <jcameron@webmin.com>
Fri, 20 Mar 2009 17:36:41 +0000 (17:36 +0000)
miniserv.pl

index 532a650..db13f6f 100755 (executable)
@@ -1547,7 +1547,9 @@ if (%users) {
                if ($rv == 0) {
                        # Cannot login!
                        local $hrv = &handle_login(
-                               $in{'answer'} || "unknown", 0, 0, 1, undef);
+                               !$in{'cid'} && $in{'answer'} ? $in{'answer'}
+                                                            : "unknown",
+                               0, 0, 1, undef);
                        return $hrv if (defined($hrv));
                        }
                elsif ($rv == 1 || $rv == 3) {