Installation Assistant sends cleartext password by mail
Posted: Wed Apr 26, 2017 9:16 pm
IMHO it would be better to not include the admin password in the mail thats sent after a successful installation. Since email is inherently insecure and know the password is saved in at least one location (mailbox) in cleartext.
Maybe we could skip the "Your installation of CMS Made Simple is complete." email altogether since we already know we installed the CMS successfully because the Installation Assistant told us and we're going to set the Mail Settings properly after we login the first time anyway.
Maybe we could skip the "Your installation of CMS Made Simple is complete." email altogether since we already know we installed the CMS successfully because the Installation Assistant told us and we're going to set the Mail Settings properly after we login the first time anyway.