You are viewing a plain text version of this content. The canonical link for it is here.

Posted to apache-bugdb@apache.org by ma...@locus.apache.org on 2000/02/12 19:44:56 UTC

Re: mod_log-any/5747

Synopsis: Does not log userid/pass if brought in on URL line

State-Changed-From-To: open->closed
State-Changed-By: marc
State-Changed-When: Sat Feb 12 10:44:03 PST 2000
State-Changed-Why: 
This has nothing to do with Apache.  Putting a username and password
in a HTTP URL is a non-standard and poorly designed concept implemented
by some browsers.  They internally fudge it into what they send;
Apache is logging what is being sent.