[TYPO3-core] RFC: #10993: install tool shows plain passwords

Georg Ringer news at ringerge.org
Mon Apr 27 16:15:12 CEST 2009


Hi,

sorry but -1.

There would be just one reason to mask the password and this is security 
but this is not necessary here! If someone got access to install tool 
unwanted, the user can read and edit the localconf.php already directly!

For all other users who are allowed to use the install tool it is nice 
to read the passwords (which probably they set themselves) and which are 
  saved as plain anyway!

Of course Dmitry is also right that there would be a 2nd field necessary 
for setting a new admin user's password.

Georg


More information about the TYPO3-team-core mailing list