Security issue

[giorgio42]

I just created a new user. If you click on the link that is offered at the end of this process to log in immediately , you can see the password for a short time in the browser's address field. Using get to submit passwords is not a good idea.

Cheers
Georg

[julien1]

yes this must be configurable by the admin :

1. send generated password by email
2. automatic login
3. user must login hiself

wanna do it ?