From 65680dd885f10b9729d6cb1d223e7647413dc2bc Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@libreserver.org>
Date: Sun, 28 Aug 2022 15:02:17 +0100
Subject: [PATCH] More debug

---
 daemon.py | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/daemon.py b/daemon.py
index 6e6da289d..199ba3bf8 100644
--- a/daemon.py
+++ b/daemon.py
@@ -2259,7 +2259,22 @@ class PubServer(BaseHTTPRequestHandler):
         else:
             print('WARN: No login credentials presented to /login')
             if debug:
-                print(login_params)
+                # be careful to avoid logging the password
+                login_str = login_params
+                if '=' in login_params:
+                    login_params_list = login_params.split('=')
+                    login_str = ''
+                    skip_param = False
+                    for login_prm in login_params_list:
+                        if not skip_param:
+                            login_str += login_prm + '='
+                        else:
+                            if '&' in login_prm:
+                                login_str += '&' + login_prm.split('&')[1]
+                        skip_param = False
+                        if 'password' in login_prm:
+                            skip_param = True
+                print(login_str)
             self._401('No login credentials were posted')
             self.server.postreq_busy = False
         self._200()