Remove bcrypt-hash from status.php config dump. Noticed by Denny Page

1 files changed, 1 insertions, 0 deletions

diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php
index 0f1790c..018689e 100755
--- a/src/usr/local/www/status.php
+++ b/src/usr/local/www/status.php
@@ -106,6 +106,7 @@ function doCmdT($title, $command) {
 			while (!feof($fd)) {
 				$line = fgets($fd);
 				/* remove sensitive contents */
+				$line = preg_replace("/<bcrypt-hash>.*?</bcrypt-hash>/", "<bcrypt-hash>xxxxx</bcrypt-hash>", $line);
 				$line = preg_replace("/<password>.*?<\\/password>/", "<password>xxxxx</password>", $line);
 				$line = preg_replace("/<pre-shared-key>.*?<\\/pre-shared-key>/", "<pre-shared-key>xxxxx</pre-shared-key>", $line);
 				$line = preg_replace("/<rocommunity>.*?<\\/rocommunity>/", "<rocommunity>xxxxx</rocommunity>", $line);