Fixed  SMTP password

I'm not sure it should be. Typos are a big deal in it and the value has to be there (if you need a password), so it'd likely have to be in the source anyway. I suppose it would require some level of technical knowledge, but it's trivial for an admin (with template access) to print out the value.
 
I'm not sure it should be. Typos are a big deal in it and the value has to be there (if you need a password), so it'd likely have to be in the source anyway. I suppose it would require some level of technical knowledge, but it's trivial for an admin (with template access) to print out the value.

The concern is for super mods and others who have access to the admin panel.
Yes sure .. I trust them .. but not with my passwords :D
 
I've made this change, as email exceptions are now logged, so that should allow tracking of typos.

That said, keep in mind that this isn't really true security as the password is still there in plaintext. If anything, it helps with more with "shoulder surfing".
 
Top Bottom