[dokuwiki] Re: [bug] send new password without confirmation
- From: Jeremy <stealth702@xxxxxxxxx>
- To: dokuwiki@xxxxxxxxxxxxx
- Date: Fri, 11 Nov 2005 10:07:33 -0500
On 11/11/05, Chris Smith <chris@xxxxxxxxxxxxx> wrote:
> norial wrote:
> > Hello
> >
> > Someone (Matthias?) added in the dev-version the possibility to
> > request a new password on the login page. Now it's possible to create
> > new passwords for each user without any confirmation only by fun.
> >
> > regards
> > andreas
> I added resend password option. Matthias modified the prompts. I am not
> sure what you mean by "without any confirmation only by fun". If you
> mean, all you need to do is type in a username and anyone can type in
> any username, then yes that's correct. What is your (anyone's)
> suggestion to make this less open to abuse?
well, they should know their full name or email address. once of the two.
--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist
Other related posts:
