Topic "Proxy Password logged when using RawSettings and .NET dll"

Author Message

When using the .NET library in C# and setting proxy settings as rawsettings, I see the unencrypted proxy password logged in the server log file.

I am using WinSCP 5.5.4 on Windows XP. I have replaced the details with asterisks. Example log message:
> 2014-10-16 20:45:52.370 Script: open -passive=1 -timeout=60 ftp://*****:***@**.**.***.**:** -rawsettings ProxyMethod="2" ProxyHost="***" ProxyPort="***" ProxyUsername="***" ProxyPassword="***"

Is there a way to turn off this part of the logging? This is a huge risk.

[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 26299
Location: Prague, Czechia
No, you cannot turn this off.
Martin Prikryl

You can post new topics in this forum

Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!


About donations

$9   $19   $49   $99

About donations


WinSCP Privacy Policy

WinSCP License