laravel - LDAP Credentials being logged from thrown exceptions -


inside laravel application, when binding exception, or ldap exception occurs prints credentials log:

[2016-07-14 19:30:35] local.error: exception 'bindexception' message 'can't contact ldap server' stack trace: #0 guard.php(102): ldap_bind('admin', 'password', '', '@corp.acme.org') 

is there way avoid rather catching exceptions?

maybe way 'pre-hash' password send through bind request it's not readable logs? possible?

or shouldn't worried because logs accessible people have physical / remote access server?


Comments