On 29 January at 14:18, Andreas Gohr wrote:
While updating wiki.splitbrain.org I came across the resend password
function and had a closer look at it. As far as I can remember we had a
discussion about this feature last year and agreed that it's current
state is a security problem (or at least an annoyance) because anyone
can just change the password of any user.
If it's named "resendpw" it should resend the password to the
registered mail address of the user, not change it.
