• twitter image
  • facebook image
  • youtube image
  • linkedin image
Language: CMS Made Simple Czech CMS Made Simple France CMS Made Simple Spain CMS Made Simple Hungary CMS Made Simple Russia CMS Made Simple Netherlands

All times are UTC




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 
Author Message
 Post subject: Installation Assistant sends cleartext password by mail
PostPosted: Wed Apr 26, 2017 9:16 pm 
Offline
Forum Members
Forum Members
User avatar

Joined: Tue May 02, 2006 10:58 am
Posts: 221
Location: The Netherlands
IMHO it would be better to not include the admin password in the mail thats sent after a successful installation. Since email is inherently insecure and know the password is saved in at least one location (mailbox) in cleartext.

Maybe we could skip the "Your installation of CMS Made Simple is complete." email altogether since we already know we installed the CMS successfully because the Installation Assistant told us and we're going to set the Mail Settings properly after we login the first time anyway.


Top
  Profile  
 
Share On:
Share on Facebook Share on Twitter Share on Google+
 Post subject: Re: Installation Assistant sends cleartext password by mail
PostPosted: Wed Apr 26, 2017 9:40 pm 
Offline
Dev Team Member
Dev Team Member
User avatar

Joined: Tue Oct 19, 2004 6:44 pm
Posts: 7925
Location: Fernie British Columbia, Canada
You can choose not to receive the email by turning on the advanced mode.

But... people have requested that we NOT drop the email.

_________________
Follow me on twitter
Please post system information from "Extensions >> System Information" (there is a bbcode option) on all posts asking for assistance.
--------------------
If you can't bother explaining your problem well, you shouldn't expect much in the way of assistance.


Top
  Profile  
 
Share On:
Share on Facebook Share on Twitter Share on Google+
 Post subject: Re: Installation Assistant sends cleartext password by mail
PostPosted: Wed Apr 26, 2017 9:58 pm 
Offline
Forum Members
Forum Members
User avatar

Joined: Tue May 02, 2006 10:58 am
Posts: 221
Location: The Netherlands
Shouldn't it be an option to send the email in advanced mode and make it default not to send out an email to make new installs a little more secure?


Top
  Profile  
 
Share On:
Share on Facebook Share on Twitter Share on Google+
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
HostPapa CMS Made Simple hosting