From a5b4308a517a66b320ba69be8604144ce74f417e Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Tue, 18 Apr 2017 15:44:20 +0200 Subject: Don't put the SMTP password into the HTML code Signed-off-by: Joas Schilling --- lib/private/Settings/Admin/Additional.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'lib/private/Settings') diff --git a/lib/private/Settings/Admin/Additional.php b/lib/private/Settings/Admin/Additional.php index d133e4737a7..59058851a64 100644 --- a/lib/private/Settings/Admin/Additional.php +++ b/lib/private/Settings/Admin/Additional.php @@ -65,6 +65,10 @@ class Additional implements ISettings { 'mail_smtppassword' => $this->config->getSystemValue('mail_smtppassword', ''), ]; + if ($parameters['mail_smtppassword'] !== '') { + $parameters['mail_smtppassword'] = '********'; + } + return new TemplateResponse('settings', 'admin/additional-mail', $parameters, ''); } -- cgit v1.2.3