Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

martin

Re: Proxy Password logged when using RawSettings and .NET dll

No, you cannot turn this off.
Guest

Proxy Password logged when using RawSettings and .NET dll

When using the .NET library in C# and setting proxy settings as rawsettings, I see the unencrypted proxy password logged in the server log file.

I am using WinSCP 5.5.4 on Windows XP. I have replaced the details with asterisks. Example log message:
> 2014-10-16 20:45:52.370 Script: open -passive=1 -timeout=60 ftp://*****:***@**.**.***.**:** -rawsettings ProxyMethod="2" ProxyHost="***" ProxyPort="***" ProxyUsername="***" ProxyPassword="***"

Is there a way to turn off this part of the logging? This is a huge risk.

Thanks,
Jack