[PASSWORD] text displaying in message to user

Hi!

In the CB Configuration, Registration tab, it lists field names which can be included in the following emails. When I include [PASSWORD] in the Welcome Email, the email received still contains "[PASSWORD]", instead of the value.

Is this a bug?

I am running CB version 1.4.

Thanks,
WebMuse

[PASSWORD] can only be included in the Pending email unless you're using randomly generated passwords then you must include it in BOTH emails. Otherwise Pending only.

Thanks for the clarification.

Can you add this to the wishlist?

I prefer to keep the shorter email received after my account is active, as a reminder. It is cleaner than having someone return to make a minor profile update after say 6 months, they might forget and just click the link provided in the earlier email.

The reason [PASSWORD] is only available in the confirmation email is that, after user registration and sending of the confirmation mail, the password is immediately encrypted and stored in the database. Keeping the password unencrypted would be a security risk.

With an update, the unencrypted password string could be captured just before it is encrypted as part of the confirmation process, and then this could be included in the email sent to the user. Wouldn't this be possible? Reference a value already in memory, instead of reading from the database. Or build the email to be sent, before the password is encrypted, and decide whether to send after the confirmation updates are completed.

This should be fairly easy to incorporate, with a few enhancements to the code, and a bit of open thinking.

G