From 36ba2899ff72ec7239e0b7d63805fa01768385ca Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@users.sourceforge.net>
Date: Tue, 6 Feb 2007 22:24:12 +0000
Subject: [PATCH] Sec: Supprime mot de passe des logs

---
 htdocs/lib/databases/mysql.lib.php  | 6 +++---
 htdocs/lib/databases/mysqli.lib.php | 1 +
 htdocs/lib/databases/pgsql.lib.php  | 2 +-
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/htdocs/lib/databases/mysql.lib.php b/htdocs/lib/databases/mysql.lib.php
index 684fe4aaf4a..b5b70109df7 100644
--- a/htdocs/lib/databases/mysql.lib.php
+++ b/htdocs/lib/databases/mysql.lib.php
@@ -193,17 +193,17 @@ class DoliDb
   }
 
   /**
-     \brief      Connection vers le serveur
+     \brief		Connection vers le serveur
      \param	    host		addresse de la base de données
      \param	    login		nom de l'utilisateur autoris
      \param	    passwd		mot de passe
      \param		name		nom de la database (ne sert pas sous mysql, sert sous pgsql)
-     \return		resource	handler d'accès à la base
+     \return	resource	handler d'accès à la base
      \seealso	close
   */
   function connect($host, $login, $passwd, $name)
   {
-    dolibarr_syslog("DoliDB::connect host=$host, login=$login, passwd=$passwd, name=$name");
+    dolibarr_syslog("DoliDB::connect host=$host, login=$login, passwd=--hidden--, name=$name");
     $this->db  = @mysql_connect($host, $login, $passwd);
     return $this->db;
   }
diff --git a/htdocs/lib/databases/mysqli.lib.php b/htdocs/lib/databases/mysqli.lib.php
index bb0724325a3..5b5d9e4faef 100644
--- a/htdocs/lib/databases/mysqli.lib.php
+++ b/htdocs/lib/databases/mysqli.lib.php
@@ -194,6 +194,7 @@ class DoliDb
     */
     function connect($host, $login, $passwd, $name)
     {
+		dolibarr_syslog("DoliDB::connect host=$host, login=$login, passwd=--hidden--, name=$name");
         $this->db  = @mysqli_connect($host, $login, $passwd);
         //print "Resultat fonction connect: ".$this->db;
         return $this->db;
diff --git a/htdocs/lib/databases/pgsql.lib.php b/htdocs/lib/databases/pgsql.lib.php
index dea6d84bc13..112272596ff 100644
--- a/htdocs/lib/databases/pgsql.lib.php
+++ b/htdocs/lib/databases/pgsql.lib.php
@@ -161,7 +161,7 @@ class DoliDb
     */
     function connect($host, $login, $passwd, $name)
     {
-        $con_string = "host=$host dbname=$name user=$login password=$passwd";
+        $con_string = "host=$host dbname=$name user=$login password=--hidden--";
         $this->db = pg_connect($con_string);
         if ($this->db)
         {