[Koha-bugs] [Bug 27812] Remove the ability to transmit a patron's plain text password over email

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Wed Mar 29 01:25:20 CEST 2023


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27812

--- Comment #41 from David Cook <dcook at prosentient.com.au> ---
(In reply to Hugo Agud from comment #39)
> The accdetail send the password via mail when a new account is created, but
> instead of plain text they receive the encrypted password

To nit-pick a little, it's "the password hash" rather than "the encrypted
password".

I think there's another bug report that removes "borrower.password" from
notices as well, since even emailing the password hash is not ideal.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list