don't expose given passwords in error messages

diff --git a/src/ftp.cc b/src/ftp.cc
index 1f75a241d3c6af2572bcffa4f56ffd4e3586df1d..5c544759702efaa38762dd08ecdabef4a5372de2 100644 (file)
--- a/src/ftp.cc
+++ b/src/ftp.cc
@@ -1,6 +1,6 @@
 
 /*
- * $Id: ftp.cc,v 1.263 1999/01/12 23:37:43 wessels Exp $
+ * $Id: ftp.cc,v 1.264 1999/01/14 23:55:40 wessels Exp $
  *
  * DEBUG: section 9     File Transfer Protocol (FTP)
  * AUTHOR: Harvest Derived
@@ -2198,6 +2198,10 @@ ftpFail(FtpStateData * ftpState)
        err->ftp.request = ftpState->old_request;
     else
        err->ftp.request = ftpState->ctrl.last_command;
+    if (err->ftp.request) {
+        if (!strncmp(err->ftp.request, "PASS", 4))
+           err->ftp.request = "PASS <yourpassword>";
+    }
     if (ftpState->old_reply)
        err->ftp.reply = ftpState->old_reply;
     else