Do not log bind when logging SQL statements.

1 files changed, 3 insertions, 2 deletions

diff --git a/core/Db.php b/core/Db.php
index eb6176f070..e845a5ab6e 100644
--- a/core/Db.php
+++ b/core/Db.php
@@ -683,6 +683,7 @@ class Db
 
     private static function logSql($functionName, $sql, $parameters = array())
     {
-        Log::verbose("Db::%s() executing SQL:\n%s\nwith bind = %s", $functionName, $sql, $parameters);
+        // NOTE: at the moment we dont log bind in order to avoid sensitive information leaks
+        Log::verbose("Db::%s() executing SQL:\n%s", $functionName, $sql);
     }
-}
\ No newline at end of file
+}