Not show value of $g_smtp_password in custom_config.inc.php

[segicas2015]

In the file custom_config.inc.php, we can set the value of the field $g_smtp_password and that password can be viewed by anyone who has access to the file:

For example:

$g_smtp_username = 'myUser'; # user
$g_smtp_password = 'myPassword'; # password

My question is if is it possible to not show the value of the field $g_smtp_password ? How?

Thank you.

[fman]

same happens with password for db access in config_db.inc.php
The password has always been in plain text.
If you have the correct permissions on it, the file is only readable for the right group of users.

[segicas2015]

Yes, but I am not the only one that has access into that folder and then I wanted to hide or mask that password because it is the password of my e-mail.

What do you recommend to me regarding that?

[fman]

No way
But is absolutely wrong using your user to connect to smtp server, you need to create a SERVICE ACCOUNT.
You need to protect the folder using good rights at file system level