Synopsis: Does not log userid/pass if brought in on URL line
State-Changed-From-To: open->closed State-Changed-By: marc State-Changed-When: Sat Feb 12 10:44:03 PST 2000 State-Changed-Why: This has nothing to do with Apache. Putting a username and password in a HTTP URL is a non-standard and poorly designed concept implemented by some browsers. They internally fudge it into what they send; Apache is logging what is being sent.