This topic is locked

Password display in email after registration

3/27/2007 8:08:35 AM
PHPRunner General questions
T
tparki authorDevClub member

I'm using 3.1 build 318 of this splendid product. I'm concerned that the email I receive as administrator notifiying me of a new user's registration contains both user id and password in legible format. This seems to me to be an insecure practice and I want to eliminate the password from the email. How do I do this? I should mention that initially I did not have the encrypt box ticked but have now encrypted all users passwords.

Thanks

Tim

J
Jane 3/27/2007

Hi,
to remove user password in the notification email open generated register.php file, find and remove these lines:

$label = "Password";

$message.=$label.": ".$values["Password"]."\r\n";

T
tparki authorDevClub member 3/28/2007

Hi,

to remove user password in the notification email open generated register.php file, find and remove these lines:


Thanks, Jane. Its easy when you know how!

Seriously, though, would it not be better if this was the default option at least when encryption was invoked?

Tim