lloogg
lloogg copied to clipboard
Cleartext password is sent via email on registration
The password is stored hashed with bcrypt but is sent in cleartext upon registration because there is now to restore an account with a lost password otherwise, nor to change the password.