VirtueMart Forum

VirtueMart 2 + 3 + 4 => Administration & Configuration => Topic started by: leahRae on March 15, 2013, 16:39:29 PM

Title: Remove password from registration email
Post by: leahRae on March 15, 2013, 16:39:29 PM
Hi,

I have searched and can't find a way to remove the password from the registration email. I have looked in my language files and can't figure out what to change or remove.

I am using Joomla 2.5 and Virtuemart 2.0.18

Thanks for any assistance.
Title: Re: Remove password from registration email
Post by: jenkinhill on March 15, 2013, 16:52:08 PM
That is a Joomla setting. Go the the User manager options and set "Send Password" to no.
Title: Re: Remove password from registration email
Post by: leahRae on March 20, 2013, 14:32:51 PM
As usual your right! Thanks so much!  ;D
Title: Re: Remove password from registration email
Post by: leahRae on March 20, 2013, 17:08:25 PM
Moved a bit fast on that "solved" button.

This actually was a Virtuemart issue. I needed to change components > com_virtuemart > views > user > tmpl > mail_html_reguser.php    I changed the password_clear to password_hidden, and then changed my language > en_gb > en_gb.com_virtuemart.ini line 623 from "your password: " to "your password: ******". Of course I could have just removed the password_clear line all together.

Hope this helps someone   ;)
Title: Re: Remove password from registration email
Post by: jasonyon on December 21, 2013, 19:33:14 PM
This helped me! thanks leahRae!

Virtuemart devs, why would you even show a password in the registration email?
Title: Re: Remove password from registration email
Post by: jenkinhill on December 21, 2013, 19:38:37 PM
It is Joomla default. Nothing at all to do with VM!
Title: Re: Remove password from registration email
Post by: Osearcaigh on June 29, 2014, 15:27:29 PM
This is actually a Virtuemart issue - the Joomla setting for sending user passwords does not influence the Virtuemart code:

echo JText::_('COM_VIRTUEMART_YOUR_PASSWORD')  . $this->user->password_clear . $li. $li;

Remember flks, use a template overrise if you want to comment that line out of components > com_virtuemart > views > user > tmpl > mail_html_reguser.php 

Tested with VM 2.0.6 and J 2.5.22


Title: Re: Remove password from registration email
Post by: AH on June 29, 2014, 18:09:50 PM
QuoteIt is Joomla default. Nothing at all to do with VM!

Agree with Frank  VM is disclosing the password via email in the registration mailing.

components/com_virtuemart/views/user/tmpl/mail_html_reguser.php
and
components/com_virtuemart/views/user/tmpl/mail_raw_reguser.php


                echo JText::_('COM_VIRTUEMART_YOUR_PASSWORD')  . $this->user->password_clear . $li. $li;

Many sites do this, it is up to you whether you assign an override.

It should be noted that :-

Joomla does disclose the password for registration that requires activation! (of course this is a langauge element so can be overriden - without a template change)

If no activiation is necessary, the password is not disclosed.


COM_USERS_EMAIL_REGISTERED_WITH_ACTIVATION_BODY="Hello %s,\n\nThank you for registering at %s. Your account is created and must be activated before you can use it.\nTo activate the account click on the following link or copy-paste it in your browser:\n%s \n\nAfter activation you may login to %s using the following username and password:\n\nUsername: %s\nPassword: %s"
COM_USERS_EMAIL_REGISTERED_WITH_ADMIN_ACTIVATION_BODY="Hello %s,\n\nThank you for registering at %s. Your account is created and must be verified before you can use it.\nTo verify the account click on the following link or copy-paste it in your browser:\n %s \n\nAfter verification an administrator will be notified to activate your account. You'll receive a confirmation when it's done.\nOnce that account has been activated you may login to %s using the following username and password:\n\nUsername: %s\nPassword: %s"