I was just wondering : why does CMSMS display the password you entered in the admin panel when you entered it wrong ?
i found out that :
- No other CMS does it
- No other kind of big website does it
- It's no use for the newbie-administrator who still sees this password as ***** characters, so it would never help him/her to find out where he/she got the password wrong
- It could lead to anybody reading the almost-exact password in the html source if the admin left the browser open to that page or by using the 'back' button enough times even after the admin logs out
- No login system i know of does it
All the best,
DJ_Apx