[imp] Password disclosure

Lars Hecking lhecking@nmrc.ucc.ie
Fri, 23 Nov 2001 14:15:42 +0000


> No, this is our issue. People asked so many times to make the login 
> credentials available to all Horde apps, that we put it in the session 
> data. Unfortunately no one had the time so far to store it encrypted.
 
 Can you please provide a patch that leaves out this information
 until it is fixed properly?

 One doesn't store cleartext passwords. Never ever.

> But that will hopefully be fixed before the release.