Why Magento 1.9.3.4
welcome email still send customer password in plain text
?
I think this is not safe at all. I know that I can replace the line <strong>Password</strong>: {{htmlescape var=$customer.password}}
to not show the passwords
I thought, after 1.9, it won't show passwords any more, but accidentally I found the welcome email include the password in plain text .
I wonder whether my magento codes have Security problem, because I think the password should not been seen and shown in any methods.