WebApp Sec mailing list archives

IIS log


From: Justin H Tran <justint () us ibm com>
Date: Tue, 5 Aug 2003 15:34:48 -0400





I just viewed an IIS log and I noticed that the credit card # is loogged.
I beleive that this is a major flaw to log credit card # is clear text.
Does anyone have any advice?


Regards,
Justin


Current thread: