Thread:Project:Support desk/Restricted Access to all ftp links (2)/reply (7)

> the user can see the hashed password, but it's his own password.

...as long as caching really is deactivated! When MediaWiki only caches one such page and there is a way to get that page from cache again, you have a major security problem as this can basically leak all your users' passwords! You must make really, really sure that caching definitely is deactivated completely. This again will have negative impact on performance.