why's there no database password in "Global Configuration" screen?

[CirTap]

Hi,

I'm really curious, repeating the subject: "Why's there no database password field in 'Global Configuration' screen?"
One may enter:
- FTP password
- SMTP password
but not for the database. 

That's not only very "inconvenient", as one needs to edit configuration.php to do so, in fact it renders the whole db setting block useless; a db-user usually needs to have a password to connect.
If I have to edit configuration.php manually anyway then there's no need for these fields to appear in global config.

I usually use an "enhanced" db-user account to install Joomla! or an extension, and then flip it back to a generic, restricted "web user" i.e. w/o DROP or CREATE privileges.

Thanks for any reasonable explanation.

Have fun,
CirTap

[edit: updated subject to be more precise]

[herb200mph]

There is -- at least in my configuration.php file (I've changed the last four items to remove my content):

var $dbtype = 'mysql';
var $host = 'localhost:';
var $user = 'db user name';
var $password = 'db user password;
var $db = 'name of db';
var $dbprefix = 'db table prefix';

[CirTap]

I was referring to the "Global Configuration" in administrator.

of course there's one in configuration.php 

[edit: updated subject]

[leadict]

I think it was removed for security reasons.

There is a old thread discussing that subject:

http://forum.joomla.org/index.php/topic,8057.0.html

[CirTap]

aha, ok. thanx leadict.
I already thought so, but wasn't sure.

stil: why have the FTP password, then?
apparently FTP'ing is not considered a security problem? ;-)

Doesn't really make any sense the way it is now, does it?

Any developers here to answer that?

Have fun,
CirTap