Bogus password reminders -- remove my account
[email protected] (John Pye)
| Newsgroups | php.pear.webmaster |
|---|---|
| Message-ID | <[email protected]> |
Hi there Your pear.php.net website has started spontaneously sending me password reminders every day or two for my bug #2100. I have not logged in to the website for years. The email text is "The password for PEAR bug report #2100 is [password removed]". Your website clearly violates sound website design principles in that it stores passwords un-hashed and sends them out to users as plaintext, so I would consider this to be a pretty serious problem, given the habits of most internet users when it comes to choice of passwords. Please remove my password from your system and disable my account, and/or remove my account or whatever it is that is recording this password. Cheers JP