From 8aab2f73e31c7d49975f4e448d2611d86fbab64e Mon Sep 17 00:00:00 2001
From: Jochen Lienhard <lienhard@ub.uni-freiburg.de>
Date: Fri, 6 Jul 2018 10:09:29 -0400
Subject: [PATCH] Do not log passwords.

---
 module/VuFindSearch/src/VuFindSearch/Backend/EDS/Backend.php | 2 +-
 module/VuFindSearch/src/VuFindSearch/Backend/EDS/Base.php    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Backend.php b/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Backend.php
index 6348fcb8a27..1e9f17fbae8 100644
--- a/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Backend.php
+++ b/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Backend.php
@@ -438,7 +438,7 @@ class Backend extends AbstractBackend
         if (!empty($username) && !empty($password)) {
             $this->debugPrint(
                 'Calling Authenticate with username: '
-                . "$username, password: $password, orgid: $orgId "
+                . "$username, password: XXXXXXXX, orgid: $orgId "
             );
             $results = $this->client->authenticate($username, $password, $orgId);
             $token = $results['AuthToken'];
diff --git a/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Base.php b/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Base.php
index 77065f7fcc6..5092e241b4d 100644
--- a/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Base.php
+++ b/module/VuFindSearch/src/VuFindSearch/Backend/EDS/Base.php
@@ -222,7 +222,7 @@ abstract class Base
     public function authenticate($username = null, $password = null, $orgid = null)
     {
         $this->debugPrint(
-            "Authenticating: username: $username, password: $password, orgid: $orgid"
+            "Authenticating: username: $username, password: XXXXXXX, orgid: $orgid"
         );
         $url = $this->authHost . '/uidauth';
         $org = $orgid ?? $this->orgId;
-- 
GitLab