password recovery feature

[GoogleCodeExporter]

a password recovery feature is necessary for v1.0-release.

simply have a form that accepts either the username or e-mail address of
the user. ttf would then e-mail the user a link that would enable them to
reset their password.

Original issue reported on code.google.com by lucasreddinger on 9 Jan 2007 at 2:29

[GoogleCodeExporter]

Original comment by lucasreddinger on 9 Jan 2007 at 2:38

• Added labels: Milestone-1.0-release

[GoogleCodeExporter]

Original comment by lucasreddinger on 19 Feb 2007 at 9:54

• Added labels: OpSys-All, Priority-High
• Removed labels: Priority-Critical

[GoogleCodeExporter]

so i think i might copy punbb's way of handling this:

make a new table `ttf_forgot` with `user_id` and `password` fields.

let a user enter his/her username or e-mail address.
insert the matching user_id and SHA(password) into `ttf_forgot`.
email the username and password to the e-mail address, with a link to a special
script (e.g., ttf.com/forgot.php?user_id=blah&password=blah).

when they click the link, ttf will change their active password (in `ttf_user`) 
to
the one in `ttf_forgot` and remove the entry from `ttf_forgot`.

sound good?

Original comment by lucasreddinger on 30 Mar 2007 at 4:32

• Removed labels: OpSys-All

[GoogleCodeExporter]

Original comment by lucasreddinger on 15 Apr 2007 at 1:56

• Changed state: Started

[GoogleCodeExporter]

Original comment by lucasreddinger on 6 Apr 2008 at 8:27

• Changed state: Fixed