[SOLVED] in CBSubs with special promotion a bug makes password saved in plain text on registration

<answer class="friendly">
We are looking into the issue you are describing
Thanks for your patience!
</answer>

I am unable to reproduce your issue with exact same settings as described.

So I doubt that CBSubs or CB themselves are solely responsible for that cleartext password storage you describe.

You may want to disable all other CB plugins on a clone of the site. Then check the issue stops, and re-enable one by one until it happens again...

beat wrote: I am unable to reproduce your issue with exact same settings as described.

So I doubt that CBSubs or CB themselves are solely responsible for that cleartext password storage you describe.

Oh, it's simple for you to reproduce it!

I am now PM'ing you a link where you can download an Akeeba backed-up package (incl Kickstart) of my "clean test environment".
It has only J! 3.5.1, CB and CBSubs, and Akeeba Backup, nothing else. Just install (5 minutes), launch frontend and pick "Test Plan 3" (it's marked as the one with negative fixed promotion, etc. Register and go through the dummy payment gateway, then check the PW field for the new user in the database. Bingo!


Meanwhile I'll do as you advised and play with disabling plugins...

beat wrote: You may want to disable all other CB plugins on a clone of the site. Then check the issue stops...

Done. See attached screenshot for all plugins not required being disabled in my clean test site.

But the issue doesn't stop. Still, the PW saves in plain text under the mentioned conditions.

Well, see my post here above and the PM I sent you. You have all to reproduce it.

Thanks for staying put and fixing it soon. My client's deadline for 'going live' is now very near...

Please PM backend login credentials for a clone of your site on the same hosting environment as the site having issues. Alternatively you can provide login credentials for the site experiencing issues, but note we will be toggling extensions/features on/off and enabling debugging.

We are unable to confirm your issue on local clean installs across several test environments. We've also had no other reports (that I am aware of) regarding this issue. It appears isolate to your install.

We do not unpack unfamiliar sources (including Akeeba Kickstarts), sorry. We do not have the time to setup clean environments off-site everytime someone needs an install review. You will have to provide the clone your self on your existing hosting environment (ideal as it allows us to also factor in possible server issues) or login to your site it self (please backup if you do).