记录“商业”广告的最佳实践交易对象
我应该记录一个“商业”交易对象（例如信用卡处理网关的请求/响应）。
有人提到使用 log4net 来存储......但感觉不太对，特别是考虑到一些信息（即对象的属性）需要完全省略或修改（例如仅记录信用的最后 4 位数字）交易涉及的卡）。
我更多地考虑的是自定义“ITransactionLogger”。想法？
I'm supposed to be logging a "commercial" transaction object (e.g. the request/response of a credit card processing gateway).
Someone mentioned using log4net to store that... but it just doesn't feel right, especially given that some information (i.e. properties on the object) need to be either omitted entirely or massaged (e.g. only log the last 4 digits of the credit card involved in the transaction).
I was thinking more of a custom "ITransactionLogger". Thoughts?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我想说的是，您正在执行“审核”而不是“日志记录”，因为您正在生成具有业务意义的数据。这意味着数据需要管理、备份等。数据库为您提供了所有这些功能。为了清楚起见，我将使用单独的审核 API。
I would say that you are doing "auditing" not "logging", in that you are producing data of business significance. This implies that the data needs to be managed, backed-up etc. All those things that databases give you. For the sake of clarity I would use a separate auditing API.
我对 log4net 的主要问题是您可以通过配置文件控制日志记录的输出目标。如果有人意外或故意更改该配置文件，敏感的财务数据将被暴露。
我通常非常喜欢不要重新发明轮子，但在这种情况下，您需要一个具有最少配置点和严格控制的日志记录解决方案。
The main problem I would have with log4net is that you can control the output target for logging through a configuration file. If someone accidentally or purposely changes that configuration file, sensitive financial data will be exposed.
I usually am a big fan of not reinventing the wheel, but in this case you need a logging solution that has minimal configuration points and tight control.
您可以为 log4net 中的特定对象/异常创建自定义格式化程序。我会尝试记录您的交易对象，特别省略信用卡详细信息。
You can create custom formatter for specific object/exception in log4net. I would try that to log your transaction objects that specifically omits the credit card detail.