phpBB3 sends password in the clear
I recently had a client complain about phpBB sending their registered password in the clear.
It’s easy to fix, simply edit these two files to remove the password field:
language/en/email/user_welcome_inactive.txt
language/en/email/user_welcome.txt
