From b20970a3e5ea2f82b10fa39d33ce3a689284e6dc Mon Sep 17 00:00:00 2001 From: Lucas Nicodemus Date: Thu, 30 Jun 2011 20:38:20 -0600 Subject: [PATCH] We don't really need to log a user's password. Defeats the point of hashing it. --- TShockAPI/Commands.cs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/TShockAPI/Commands.cs b/TShockAPI/Commands.cs index 5383ac22..f87fb521 100755 --- a/TShockAPI/Commands.cs +++ b/TShockAPI/Commands.cs @@ -194,7 +194,10 @@ namespace TShockAPI } else { - Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red); + if (!cmdText.Contains("login") || !cmdText.Contains("user")) + { + Tools.SendLogs(string.Format("{0} executed: /{1}", player.Name, cmdText), Color.Red); + } cmd.Run(cmdText, player, args); } return true; @@ -302,9 +305,6 @@ namespace TShockAPI return; } else { - args.Player.SendMessage("Invalid login attempt. This incident has been reported.", Color.Red); - args.Player.SendMessage("Group Found: " + exr[1] + ", Password Encrypt Found: " + exr[0]); - args.Player.SendMessage("Entered hash: " + encrPass + ", " + args.Parameters[1]); Log.Warn(args.Player.IP + " failed to authenticate as " + args.Parameters[0]); args.Player.LoginAttempts++; return;