diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2023-01-11 23:27:14 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2023-01-11 23:27:14 +0100 |
| commit | 075cf4c800063e3cc65c3d41a9c23222e8ebb554 (patch) | |
| tree | 6fb7d9c66fdbafea83f160c9043d9fd688844c1b /p/api/fever.php | |
| parent | c75baefe40952e6ae80aa8570c0acfc9baf7d997 (diff) | |
API avoid logging passwords (#5001)
* API avoid logging passwords
* Strip passwords and tokens from API logs
* Only log failed requests information when in debug mode
* Remove debug SHA
* Clean also Apache logs
* Better comments
* Redact also token parameters
* shfmt
* Simplify whitespace
* redacted
Diffstat (limited to 'p/api/fever.php')
| -rw-r--r-- | p/api/fever.php | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/p/api/fever.php b/p/api/fever.php index b7f9b9167..13907f16d 100644 --- a/p/api/fever.php +++ b/p/api/fever.php @@ -18,7 +18,8 @@ FreshRSS_Context::initSystem(); // check if API is enabled globally if (!FreshRSS_Context::$system_conf->api_enabled) { - Minz_Log::warning('Fever API: serviceUnavailable() ' . debugInfo(), API_LOG); + Minz_Log::warning('Fever API: service unavailable!'); + Minz_Log::debug('Fever API: serviceUnavailable() ' . debugInfo(), API_LOG); header('HTTP/1.1 503 Service Unavailable'); header('Content-Type: text/plain; charset=UTF-8'); die('Service Unavailable!'); @@ -45,16 +46,16 @@ function debugInfo() { } } global $ORIGINAL_INPUT; - return print_r( - array( + $log = sensitive_log([ 'date' => date('c'), 'headers' => $ALL_HEADERS, '_SERVER' => $_SERVER, '_GET' => $_GET, '_POST' => $_POST, '_COOKIE' => $_COOKIE, - 'INPUT' => $ORIGINAL_INPUT - ), true); + 'INPUT' => $ORIGINAL_INPUT, + ]); + return print_r($log, true); } //Minz_Log::debug('----------------------------------------------------------------', API_LOG); |