A Wordpress plugin I am using for using a SMTP server instead of the server's built in mail function is stating:
The password [SMTP password] is stored in plain text. We highly recommend you setup your password in your WordPress configuration file for improved security...
So while I understand this is different from a login situation where you can check against a password hash and don't have to store the plaintext, is there no better way for the plugin to have access to the SMTP password and not store it in plaintext?
Does their suggestion of shifting the plaintext password's location from the database to a config file make any real difference - in general and in regard to Wordpress?