Change password form for user - Githubissues

UvA-FNWI / Starfish

GNU Affero General Public License v3.0

0 stars 0 forks source link

Change password form for user #91

Open mslatour opened 10 years ago

aukejw commented 10 years ago

Added account settings in 8afab5e, e7a1fa6. Is this sufficiently safe for deployment (I personally think it isn't)?

Alternatives/enhancements include:

Sending a link to the user that allows him/her to change the password
Asking for the current password when changing
Adding confirmation messages (are you sure you want to change X)