[Kolab-devel] [issue23] Passwords (and other datas) appear as clear text in apache logs

[Florent Manens]

New submission from Florent Manens <fmanens at starxpert.fr>:

password appear in ssl_access.log in : 
"GET
/kolab/admin/user/create_user.php?action=firstsave&firstname=Florent&lastname=Manens&password_0=toto123&password_1=toto123&mail_0=manens&title_0=M.&alias_0=fmanens%40starxpert.fr&o_0=&ou_0=&roomNumber_0=&street_0=&postOfficeBox_0=&postalCode_0=&l_0=&c_0=&telephoneNumber_0=&facsimileTelephoneNumber_0=&visible=true&apply.x=36&apply.y=9&apply=Apply
HTTP/1.1" 200 7465

and also in modify requests

version : 
kolab-server-1.0-0.10mdk

----------
messages: 58
nosy: manens
priority: critical
status: unread
title: Passwords (and other datas) appear as clear text in apache logs
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue23>
________________________________________________