i imported the sql of site 1 to site 2, the salt key was changed, so when logging into the admin panel, it asked to reset the password.
on doing so, the image verification did not load up , hence could not reset the pwd, however the admin panel loaded fadedly in the bg, on clicking on the category link got access to the admin panel.
i think this should not be allowed.
just wondering....
also the smtp email pwd is not hashed/encrypted .... it should show up as stars...