password anti-disclosure for python script

action.sh

@@ -29,9 +29,10 @@
 if [ ! -e config.cfg ]; then echo "Missing config.cfg file. Edit and rename config.cfg.sample"; exit 1; fi
 source config.cfg
 
-ACTION="$1"   # adduser, changepw, listusers, userdetail, deluser, sizeall, sizeuser, viewdata
-USER="$2"
-PASS=$(cat "$3")  # $3 is a file containing the password
+ACTION=$1     # adduser, changepw, listusers, userdetail, deluser, sizeall, sizeuser, viewdata
+USER=$2
+PASSFILE=$3   # $3 is a file containing the password
+PASS=$(cat "$3")
 
 ## FUNCTIONS
 function checkaction {
@@ -199,7 +200,7 @@ if [ "$ACTION" == "changepw" ]; then
     exit 1
   fi
   
-  python changepw.py "$USER" "$PASS"
+  python changepw.py "$USER" "$PASSFILE"
   
   if [ $? == 0 ]; then
     # Send infomail