164227 - [mozbot.pl] Mozbot shouldn't log passwords (newuser, auth)

Status: RESOLVED INACTIVE

(Webtools Graveyard :: Mozbot, defect)

Description

[Tobias Burnus]

While mozbot.pl.cfg contains the passwords in a hash form it logs the /msg
mozbot communication with password.

Result: 
2002-08-23 08:29:15 UTC Told:  <nick> auth burnus foobar
2002-08-23 08:29:15 UTC Authed:  <nick> auth burnus foobar

Expected:
a) Hide the password
  2002-08-23 08:29:15 UTC Told:  <nick> auth burnus <password>
  2002-08-23 08:29:15 UTC Authed:  <nick> auth burnus <password>
b) Don't log these.

Comment 1

[Hixie (not reading bugmail)]

not sure how to do this

Comment 2

[Hixie (not reading bugmail)]

...or even whether to try.

Comment 3

[Wolf [:wolf]]

Resetting to new default owner.

Comment 4

[god]

Well, if anyone still cares:

after line 1348
chomp $line; # ...and they are probably a constant string!
add

        $line =~s/\s*auth\s+($variablepattern)\s+($variablepattern)/auth $1 <password>/osi;
        $line =~s/\s*password\s+($variablepattern)\s+($variablepattern)(\s+($variablepattern))?\s*/password <oldpassword> <newpassword> <newpassword>/osi;
       	$line =~s/\s*new\s*user\s+($variablepattern)\s+($variablepattern)(\s+($variablepattern))?\s*/newuser $1 <password> <password>/osi;
        $line =~s/password '$variablepattern' and/password '<password>' and/osi;

Comment 5

[:glob ✱]

Mozbot/Firebot is in maintenance-only mode; no further changes are planned.