• @ItsMyFirstDay@lemmy.world
    link
    fedilink
    111 year ago

    I’m not 100% on this but I think GET requests are logged by default.

    POST requests, normally used for passwords, don’t get logged by default.

    BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs

    • @bleistift2@feddit.de
      link
      fedilink
      English
      11 year ago

      GET requests are logged

      That’s why I specified

      the receiving web server doesn’t log the URI

      in my question.

    • Get and post requests are logged

      The difference is that the logged get requests will also include any query params

      GET /some/uri?user=Alpha&pass=bravo

      While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this

      POST /some/uri