[eluser]xwero[/eluser]
I understand the security risks but from most clients we get the request to see the passwords from the users.
Because a lot of people just don't want to go through the whole request new password -> validate profile -> generate new password routine they just email the site admin to send their password.
It are real world situations that make you not use the most secure methods.