[dokuwiki] Re: [bug] send new password without confirmation

  • From: Chris Smith <chris@xxxxxxxxxxxxx>
  • To: dokuwiki@xxxxxxxxxxxxx
  • Date: Fri, 11 Nov 2005 14:33:34 +0000

norial wrote: 

Hello

Someone (Matthias?) added in the dev-version the possibility to request a new password on the login page. Now it's possible to create new passwords for each user without any confirmation only by fun.

regards
 andreas
I added resend password option. Matthias modified the prompts. I am not sure what you mean by "without any confirmation only by fun". If you mean, all you need to do is type in a username and anyone can type in any username, then yes that's correct. What is your (anyone's) suggestion to make this less open to abuse?

Cheers,

Chris
--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Other related posts:

  1. Home
  2. dokuwiki
  3. Archive
  4. 11-2005