Aside from the weak security which I'm not addressing...
User registration web service has a few problems
- It doesn't save passwords properly so the user can never log in.
- It allows creation of admin accounts. Combined with the weak security it's an
even bigger problem.
- It will reset the password of existing users with the new password that is
sent.
Original issue reported on code.google.com by aaron.lo...@gmail.com on 3 Jul 2013 at 5:56
Original issue reported on code.google.com by
aaron.lo...@gmail.com
on 3 Jul 2013 at 5:56