We don't really need to log a user's password. Defeats the point of hashing it.

This commit is contained in:
Lucas Nicodemus 2011-06-30 20:38:20 -06:00
parent a4fd16ae64
commit b20970a3e5

View file

@ -194,7 +194,10 @@ namespace TShockAPI
}
else
{
Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red);
if (!cmdText.Contains("login") || !cmdText.Contains("user"))
{
Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red);
}
cmd.Run(cmdText, player, args);
}
return true;
@ -302,9 +305,6 @@ namespace TShockAPI
return;
} else
{
args.Player.SendMessage("Invalid login attempt. This incident has been reported.", Color.Red);
args.Player.SendMessage("Group Found: " + exr[1] + ", Password Encrypt Found: " + exr[0]);
args.Player.SendMessage("Entered hash: " + encrPass + ", " + args.Parameters[1]);
Log.Warn(args.Player.IP + " failed to authenticate as " + args.Parameters[0]);
args.Player.LoginAttempts++;
return;