server log security

Unlimited Shared hosting & Unlimited Disk Space from $5.95 - Dreamhost
Solid Managed VPS with 4 IP's from $60 - Liquid Web
Lightning Fast Dedicated Servers & 1GB RAM from $149 - Liquid Web
#1 Domain Registration with WHOIS Privacy - Just $9.95

This Dreamhost thread was started by FreemanNg on 2009-04-11 23:50:45:

Post Reply? I’m in the middle of setting up handling of PayPal’s IPN postbacks, and encountered this warning in their documentation: “Shared secrets posted to you by PayPal through IPN are not encrypted; they are in clear text for easier processing. Therefore, the shared secrets are recorded in the clear in the access logs of your web server. Be sure to practice proper security for these logs. If you use a web server hosting service, ensure that your provider practices proper security of your data.” So, my question is: are my server logs secure on Dreamhost? Can anyone else besides me see them? (More precisely: if PayPal does a POST to some script on my site, is there any way for anyone else to see what the post parameters were?) Thanks.

Join in on the original post at the Dreamhost Forum, Sign up for Dreamhost or view our Dreamhost Review.