danny 2002/07/28 04:15:06
Modified: src/java/org/apache/james/pop3server POP3Handler.java
Log:
password blanking in logs, thanks Peter Goldstein
Revision Changes Path
1.7 +10 -1
jakarta-james/src/java/org/apache/james/pop3server/POP3Handler.java
Index: POP3Handler.java
===================================================================
RCS file:
/home/cvs/jakarta-james/src/java/org/apache/james/pop3server/POP3Handler.java,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- POP3Handler.java 27 Feb 2002 04:47:22 -0000 1.6
+++ POP3Handler.java 28 Jul 2002 11:15:06 -0000 1.7
@@ -163,8 +163,9 @@
private boolean parseCommand(String commandRaw) {
if (commandRaw == null) return false;
- getLogger().info("Command received: " + commandRaw);
+ //getLogger().info("Command received: " + commandRaw);
String command = commandRaw.trim();
+ commandRaw = command;
StringTokenizer commandLine = new StringTokenizer(command, " ");
int arguments = commandLine.countTokens();
if (arguments == 0) {
@@ -179,6 +180,14 @@
String argument1 = (String) null;
if(arguments > 2) {
argument1 = commandLine.nextToken();
+ }
+ if (getLogger().isInfoEnabled()) {
+ // Don't display password in logger
+ if (!command.equalsIgnoreCase("PASS")) {
+ getLogger().info("Command received: " + commandRaw);
+ } else {
+ getLogger().info("Command received: PASS <password omitted>");
+ }
}
if (command.equalsIgnoreCase("USER"))
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
