From a7950968fc3500e2e36845fa33dc023612df6618 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Thu, 8 Jan 2009 18:49:23 +0000
Subject: [PATCH] Don't log hashed password

---
 acl/save_user.cgi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/acl/save_user.cgi b/acl/save_user.cgi
index 03b4d6644..69238d93e 100755
--- a/acl/save_user.cgi
+++ b/acl/save_user.cgi
@@ -355,6 +355,7 @@ if ($in{'old'} && $in{'acl_security_form'} && !$group) {
 
 # Log the event
 delete($in{'pass'});
+delete($in{'oldpass'});
 if ($in{'old'}) {
 	&webmin_log("modify", "user", $in{'old'}, \%in);
 	}