Posted: 2014-10-17 14:39
When using the .NET library in C# and setting proxy settings as rawsettings, I see the unencrypted proxy password logged in the server log file.
I am using WinSCP 5.5.4 on Windows XP. I have replaced the details with asterisks. Example log message:
> 2014-10-16 20:45:52.370 Script: open -passive=1 -timeout=60 ftp://*****:***@**.**.***.**:** -rawsettings ProxyMethod="2" ProxyHost="***" ProxyPort="***" ProxyUsername="***" ProxyPassword="***"
Is there a way to turn off this part of the logging? This is a huge risk.
Location: Prague, Czechia
No, you cannot turn this off.
You can post new topics in this forum
And it's free!