From 78ae466036ed812c298e01dccc6fdffa78e4cfba Mon Sep 17 00:00:00 2001
From: Urban Müller
Date: Wed, 13 May 2020 13:47:53 +0200
Subject: it::error should cloak password2 in body as well

---
 it.class | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/it.class b/it.class
index cbdd575..8ba5dd6 100644
--- a/it.class
+++ b/it.class
@@ -283,7 +283,7 @@ static function error($p = array())
 				$body .= $_FILES      ? "\$_FILES:  " . var_export($_FILES, true) . "\n\n" : "";
 				$body .= "Processes:\n" . it::exec('ps auxf | egrep -v "rotatelogs|getbanner|logaction|httpd|systemd|sd-pam"|egrep "^www|^cron"') . "\n";
 				$body .= $stackframes ? "Stack: "     . print_r($stackframes, true) . "\n\n" : "";
-				$body  = it::replace(array('(pw|passw|password|secret)(\' => |\] => |=)[^&\s]*' => '$1$2********'), $body, array('utf8' => false));
+				$body  = it::replace(array('(pw|passw|password\d*|secret)(\' => |\] => |=)[^&\s]*' => '$1$2********'), $body, array('utf8' => false));
 			}
 
 			$type = ($p['fatal'] ? "Fatal: " : "Error: ");
-- 
cgit v1.2.3