Don't log password argument of ldapsearch command

1 files changed, 7 insertions, 2 deletions

diff --git a/lib/Net/LDAP3.php b/lib/Net/LDAP3.php
index 3202f5a..4d2082a 100644
--- a/lib/Net/LDAP3.php
+++ b/lib/Net/LDAP3.php
@@ -742,9 +742,14 @@ class Net_LDAP3
             '"*"',
         );
 
-        $command = implode(' ', $command);
+        // remove password from debug log
+        $command_debug     = $command;
+        $command_debug[11] = '*';
 
-        $this->_debug("LDAP: Executing command: $command");
+        $command       = implode(' ', $command);
+        $command_debug = implode(' ', $command_debug);
+
+        $this->_debug("LDAP: Executing command: $command_debug");
 
         exec($command, $output, $return_code);