You need to use a custom pattern with the AccessLogValve

pattern='%a %U'

http://tomcat.apache.org/tomcat-5.0-doc/catalina/docs/api/org/apache/catalina/valves/AccessLogValve.html

It would be much better to use POST requests when items such as passwords are in the URL. This way they will also not be cached by the browser or any intermediate proxies.

-Tim

Rob Tanner wrote:
Hi. I've noticed that request parameters are being written to the file catalina.out (using Tomcat 4.1.31). For the most part I don't really care, but when forms include passwords and those plaintext password gets written into the file I do. I've never intentionally turned that capability on. How do I turn it off?

Thanks,
Rob



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to