vgndeveloper.com The vignette developer community

Hello,

In our PortalBean, the login.jsp does a POST action and uses the getFullViewURL() method to send the request to the ActionProcess.jsp. When the ActionProcess.jsp's sendRedirect is called to redirect to the homepage on aunthentication, we found out that some how it appends the username and user password parameters to the GET request and written to the web server logs.

Please see the LOG line below.

LOG ===> "GET
/portal/site/cityshare/template.MAXIMIZE/action.display/?viewID=LoginProcess&submit.y=0&submit.x=0&username=test&userpass=apassword&beanID=854232697&fromLegacyURL=true
HTTP/1.1" 302 337

Any help is appreciated to avoid logging of the username and password.

Thanks in advance.