Re: IIS log

[<dotnetter () bellsouth net>]

IIS logs log the http request.  The data you are seeing is being passed in the URL (very bad) or as form data in a form 
post...

thanks 
Bill Moore
> From: Justin H Tran <justint () us ibm com>
> Date: 2003/08/05 Tue PM 03:34:48 EDT
> To: webappsec () securityfocus com
> Subject: IIS log
>
>
>
>
>
> I just viewed an IIS log and I noticed that the credit card # is loogged.
> I beleive that this is a major flaw to log credit card # is clear text.
> Does anyone have any advice?
>
>
> Regards,
> Justin