1

We're trying to clean up one of our systems as much as possible & have found that despite our attempts to block, users are accessing a certain part of our system through a HTTP GET with their password in the URL. This results in our Apache logs recording their password in plain text on the server.

Is there an Apache directive or module that can filter out (or replace) certain patterns in its logs?

  • 1
    Is correcting the way you collect the user passwords not an option for some reason? – HopelessN00b Oct 4 '12 at 7:37
  • I meant to imply that in the "despite our attempts to block" statement. This is meant to be an additional layer for any external parties that are still attempting to use old mechanisms so that we can say "we don't have your password on file". Kinda like how 'ps' removes passwords from known applications despite the fact that you shouldn't be entering passwords in plaintext on the CLI. – Mark McDonald Oct 4 '12 at 8:33
3

Create a LogFormat that has the details you want and then apply it to that virtual host, or the entire web server as desired.

If you need to filter out even more information, then use Apaches ability to write its logs to a pipe instead of a file. Hack yourself up some quick script that applies some regex or whatever to filter out whatever you like.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.