Reset Password: WSN Support

Version:

Reset Password

zac439
Member

Usergroup: Customer
Joined: Mar 01, 2007
Total Topics: 15
Total Posts: 19

Posted 03/18/07 - 10:58 AM:	#1
All you need to reset someone's password is their email address. What if someone used this to annoy people, and reset everyone's password, including the administrator? I think you should have the form instead send the current password to the email address, not a new one. It would be more practical.

Paul
Administrator

Usergroup: Administrator
Joined: Dec 21, 2001
Location: Northern California
Total Topics: 57
Total Posts: 6316

Posted 03/20/07 - 08:36 AM:	#2
It's up to you whether it does or not: http://scripts.webmastersite.net/wsnlinks/wsnmanu... But suffice it to say that if a visitor can learn the email addresses of all your members then your members have bigger problems to deal with, namely loads of spam. Don't publish them.
"Do things you love doing, because then it ain't work. Don't do something you don't really enjoy, because you're never going to work hard enough at it." - Bob Young, founder of Red Hat

You don't have permission to post.