When i switch to debugger mode, site already online, i notice that if you have enabled Email plugin, in the email array you see the mail password in plain text, in my case the gmail, but could be any SMTP password ?
Is that true if i enable debugger on a online site, everybody can access the debug window ?
May be we can hide password or better debug mode only to specific IPs ?
I test always on local, but for this time i have to check something on the online site