From fa10812ad758cefe58151e716e5e4af349a40386 Mon Sep 17 00:00:00 2001
From: Ewout de Graaf <ewout@metaregistrar.com>
Date: Wed, 11 Sep 2019 14:29:13 +0200
Subject: [PATCH] Hide domain and contact passwords in the logging

---
 Protocols/EPP/eppConnection.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/Protocols/EPP/eppConnection.php b/Protocols/EPP/eppConnection.php
index 53c81ca5..2533684d 100755
--- a/Protocols/EPP/eppConnection.php
+++ b/Protocols/EPP/eppConnection.php
@@ -1110,12 +1110,16 @@ protected function writeLog($text,$action) {
             $text = $this->hideTextBetween($text,'<clID>','</clID>');
             // Hide password in the logging
             $text = $this->hideTextBetween($text,'<pw>','</pw>');
-            // Hide password in the logging
             $text = $this->hideTextBetween($text,'<pw><![CDATA[',']]></pw>');
             // Hide new password in the logging
             $text = $this->hideTextBetween($text,'<newPW>','</newPW>');
-            // Hide new password in the logging
             $text = $this->hideTextBetween($text,'<newPW><![CDATA[',']]></newPW>');
+            // Hide domain password in the logging
+            $text = $this->hideTextBetween($text,'<domain:pw>','</domain:pw>');
+            $text = $this->hideTextBetween($text,'<domain:pw><![CDATA[',']]></domain:pw>');
+            // Hide contact password in the logging
+            $text = $this->hideTextBetween($text,'<contact:pw>','</contact:pw>');
+            $text = $this->hideTextBetween($text,'<contact:pw><![CDATA[',']]></contact:pw>');
             //echo "-----".date("Y-m-d H:i:s")."-----".$text."-----end-----\n";
             $log = "-----" . $action . "-----" . date("Y-m-d H:i:s") . "-----\n" . $text . "\n-----END-----" . date("Y-m-d H:i:s") . "-----\n";
             $this->logentries[] = $log;