From 02fb088b80737ba5bd7ba3d22a05700505a8cfa1 Mon Sep 17 00:00:00 2001
From: Sebastian Jackel <sjackel@trustinternational.com>
Date: Mon, 19 May 2014 09:16:56 +0200
Subject: [PATCH] Remove password from log message on failed login
---
routers/user/user.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/routers/user/user.go b/routers/user/user.go
index 6a7d016612..f9aba69a04 100644
--- a/routers/user/user.go
+++ b/routers/user/user.go
@@ -105,7 +105,7 @@ func SignInPost(ctx *middleware.Context, form auth.LogInForm) {
user, err = models.LoginUser(form.UserName, form.Password)
if err != nil {
if err == models.ErrUserNotExist {
- log.Trace("%s Log in failed: %s/%s", ctx.Req.RequestURI, form.UserName, form.Password)
+ log.Trace("%s Log in failed: %s", ctx.Req.RequestURI, form.UserName)
ctx.RenderWithErr("Username or password is not correct", "user/signin", &form)
return
}