Re: IIS log

[Randy <rho () clunet edu>]

This is a funny security message...  I have setup and administered
multiple IIS systems which utilize live payment systems and have never seen IIS log
CC#s.  The security hole is most likely within your webapp itself rather
than IIS.

--Randy

On Tue, 5 Aug 2003, Justin H Tran wrote:

> I just viewed an IIS log and I noticed that the credit card # is loogged.
> I beleive that this is a major flaw to log credit card # is clear text.
> Does anyone have any advice?
>
>
> Regards,
> Justin
>
>
>
> *** Incoming Mail scanned for known Viruses by CLUnet ***