2

I've noticed that when I clic on "send auto-generated password" to a customer it sends an email but it doesn't displays the new password, it appears like:

Dear customer,

Your new password is:

And doesn't displays the password, is in blank. Anyone knows why this can happen?

In the backend/System/transactional emails I have this:

<p style="font-size:12px; line-height:16px; margin:0 0 8px 0;"><strong>Your new password is:</strong> {{htmlescape var=$password}}</p>

instead of the password (Is the code OK?).

My magento version is 1.7.0.

Thanks.

2 Answers 2

2

The password section in the template should look like this:

<p style="font-size:12px; line-height:16px; margin:0 0 8px 0;"><strong>Your new password is:</strong> {{htmlescape var=$customer.password}}</p>
1
  • Yes! Was that! I put var=$cusomer.password instead of var=$password and now works. Thanks!
    – inavas
    Commented May 30, 2013 at 13:06
2

I'm not sure with which version the process was changed against a secure url to not send the password via email. But 1.7 sends a password link instead of a plaintext password

Check against the template of the 1.7.0: https://github.com/LokeyCoding/magento-mirror/blob/7aa9a6fce611cfaf79b9c8f1934942f58ce4f7c6/app/locale/en_US/template/email/account_password_reset_confirmation.html

3
  • I've changed the var=$password to var=$customer.password and works, thanks anyway !! :)
    – inavas
    Commented May 30, 2013 at 13:07
  • You should change this. Sending plain text passwords via mail is a security issue. Commented May 30, 2013 at 13:10
  • Yes you're right. I'll change that too. Thanks!
    – inavas
    Commented May 31, 2013 at 14:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.