Welcome to Geeklog, Anonymous Friday, May 03 2024 @ 12:59 pm EDT

Comments for Lost password

Lost password | 3 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Lost password

Authored by: Anonymous (Anonymous User) on Sunday, July 21 2002 @ 12:36 pm EDT

This is a major issue actually. At the moment anybody can change admin (or any other user) password without any difficulties. It even can be easily automated :)
Such situation is clearly unacceptable and should be urgently adderesed as a major vulnerability.

Lost password

Authored by: Anonymous (Anonymous User) on Sunday, July 21 2002 @ 05:28 pm EDT

Maybe geeklog needs to require whoever is requesting their password to enter that specific user\'s email address and optionally, a second authorization code like something a user can set in their account info that is required (only if they want it to be required) along with the email address to allow the new password to be emailed. Then that should hopefully fix that problem.

Lost password

Authored by: Dirk on Monday, July 22 2002 @ 12:34 am EDT

Yes, we are aware of this problem and it's already listed as a feature request.

bye, Dirk

Warning: Javascript required to enable functionality

Post a Comment

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks