Bugs item #1671574, was opened at 2007-03-01 02:39 Message generated for change (Comment added) made by robmen You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=642714&aid=1671574&group_id=105970
Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: extensions Group: v2.0 >Status: Pending >Resolution: Fixed Priority: 5 Private: No Submitted By: Abhishek (abhishea) >Assigned to: Rob Mensching (robmen) Summary: SqlDatabase logs the sa password in clear text Initial Comment: Please refer to the [edited] mail thread below: ________________________________________ From: Rob Mensching Subject: RE: SqlDatabase element logging the sa password As per that site, for general WiX questions, you really should use the [email protected] Anyway, in this case it looks like a bug. The CustomActions do not appear to be marked as “HideTarget”. Can you please open a bug on this issue. Also, what version of the WiX toolset are you using? _______________________________________ From: Abhishek Agarwal Subject: RE: SqlDatabase element logging the sa password Hi, We are using the SqlDatabase in-built Wix custom action to create our configuration database. The db can be created using Windows auth as well as SQL auth (sa/passwd). When sa/passwd is used, the log files show the password in clear text for the following 3 properties as well as the custom actions with the same name: CreateDatabase ExecuteSqlStrings RollbackCreateDatabase Is there any way I can prevent the password for being shown in the log file? Thanks, Abhishek ---------------------------------------------------------------------- >Comment By: Rob Mensching (robmen) Date: 2007-03-01 21:15 Message: Logged In: YES user_id=991639 Originator: NO Added HideTarget to a great many CustomActions to prevent secure data leakage into the log file. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=642714&aid=1671574&group_id=105970 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ WiX-devs mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/wix-devs
