PS 1.6.1.13: Password Reset Email replaces password with text

[oliiix]

Hello Community

 

I have a very strange behavior when trying to reset the client password.

I click on the password forgotten link and enter my identity. An Email with a reset link is being sent to my inbox and when following it, the password is being reset (I checked for changes in the DB, the password does get replaced by another), but the email that is then sent out to the customer containing the new password contains no password but this content:

 

Ihre neuen Anmeldedaten bei unserem Shop

E-Mail-Adresse: [email protected]
Passwort: (aus Sicherheitsgründen nicht gezeigt)

 

Which means in english something like this:

"Your new account credentials for our shop"

"email address: [email protected]"

"password: (for security reasons not being displayed)"

 

Has anyone had a similar problem? I mean a password reset where you cannot see your new password is kinda useless
In which files could the password be replaced before it's being sent out via email to the customer?

 

If you don't know, maybe you know and can share with me which files are used for the password reset so I could try to investigate this issue by myself. I just don't know with which files to start. Btw the password.html file has the following content (of course there's more but these are the important lines?), so it doesn't seem to be a problem with the email template I think:

<p data-html-only="1">
        Ihre neuen Anmeldedaten bei {shop_name}                        </p>
<span style="color:#777">
        <span><strong>E-Mail-Adresse:</strong></span> {email}<br/>
        <span><strong>Passwort:</strong></span> {passwd}
</span>

If anyone could send me into the right direction would be awesome

 

All the best,

Oli

Edited October 10, 2017 by oliiix (see edit history)