[Plugin: WP Mail SMTP] Mask mail server password

Just a security note to the developer of, and to users of, this very nice plugin. First, not everyone will need or want to do this, but all users may want to at least consider it. It is strongly suggested for sites or networks that host multiple blogs, with a site-wide administrator setting them up and controlling mail accounts and so on.

I suggest changing line 302 of the wp_mail_smtp.php file to alter the form input type for the mail server password to mask it with asterisks. This is a change to ONE LINE of code. Change …

<input name=”smtp_pass” type=”text”

to …

<input name=”smtp_pass” type=”password”

I did this because I am initially configuring, and sometimes administering, several blogs for friends and family, from the same domain and server. I have a single account in use at my Exchange server for all outbound, ‘blog-related mail, such as registration and comment notifications. This simple change allows me to use that account without revealing the password for it to each and every ‘blog operator.

Thanks