We don't really need to log a user's password. Defeats the point of hashing it.
This commit is contained in:
parent
a4fd16ae64
commit
b20970a3e5
1 changed files with 4 additions and 4 deletions
|
|
@ -194,7 +194,10 @@ namespace TShockAPI
|
|||
}
|
||||
else
|
||||
{
|
||||
Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red);
|
||||
if (!cmdText.Contains("login") || !cmdText.Contains("user"))
|
||||
{
|
||||
Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red);
|
||||
}
|
||||
cmd.Run(cmdText, player, args);
|
||||
}
|
||||
return true;
|
||||
|
|
@ -302,9 +305,6 @@ namespace TShockAPI
|
|||
return;
|
||||
} else
|
||||
{
|
||||
args.Player.SendMessage("Invalid login attempt. This incident has been reported.", Color.Red);
|
||||
args.Player.SendMessage("Group Found: " + exr[1] + ", Password Encrypt Found: " + exr[0]);
|
||||
args.Player.SendMessage("Entered hash: " + encrPass + ", " + args.Parameters[1]);
|
||||
Log.Warn(args.Player.IP + " failed to authenticate as " + args.Parameters[0]);
|
||||
args.Player.LoginAttempts++;
|
||||
return;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue