Cleartext password is sent via email on registration
Open
- Dominant language
- PHP
- Stars
- 211
- Forks
- 35
- PR merge metrics
- No merged PRs in 30d
Description
The password is stored hashed with bcrypt but is sent in cleartext upon registration because there is now to restore an account with a lost password otherwise, nor to change the password.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.