How can entered passwords be masked in log files

[frank_c]

I created an installation that requires the user to enter the logon name and password to run a service. I use a standard Edit control to capture the password using * (star) as the PasswordChar. I also enabled logging using the LOGGED variable. I do not add my own messages to the log. Everything works fine, except that I see the entered password in clear text in the log. In the log, the actual command to run the service displays the password as ****, but the field that captures the password is shown in clear text in several places. Obviously, this is a concern. Is there a way to blank the password n the log file? Is there another control that I should use?

Thanks,

Frank C.

[giaviv]

Hi Frank,

Please try overriding the value inside the password variable before calling the Apply Install command.

[frank_c]

Aviv,

I tried your suggestion, but it does not completely resolve the problem. I do see fewer entries with the actual password, but they are still there. I removed all Apply Install instances, except for the last one--just after masking the password.

Any other ideas? If no workaround, can this be added a feature request or bug fix?

Thanks,

Frank C.

[giaviv]

Frank,

You can also manually edit the log file after calling Apply Install - is that an option?