please don't send my password in cleartext in conf email

All other development questions
andrewroth
Posts: 3
Joined: 12 Jan 2008, 18:15

please don't send my password in cleartext in conf email

Postby andrewroth » 12 Jan 2008, 18:19

When I register for this forum, it sends out my password *and* login in cleartext in the confirmation email. If anyone ever got in my email, not only would they have a password I use (and try it on a bunch of other sites), they would get on this forum with my login easily since both login and password is there. This is poor security form.

-Andrew

admin
Site Admin
Posts: 2715
Joined: 17 Jul 2003, 09:44

Postby admin » 12 Jan 2008, 20:10

Hi Andrew,
You are right it can we a bad idea to send this by cleer test, but I am just using the phpbb CMS for this forum. I have not written it myself. The phpbb developers just though it was a good idea to do that by default.


Return to “Other”

Who is online

Users browsing this forum: Bing [Bot] and 1 guest