Hi,
Just wanted to make the suggestion to not email a plaintext password at any point in the registration process. It is really bad practice, from a security standpoint, to do so.
An attacker already gets enough when an email is hacked, they don't need to be given credentials on a silver platter like this.
Last edited by heppils; 30/06/14 01:52 PM.
