The password reset form can be submitted when there is no data in the form
fields. The page should catch for empty fields and NOT send out an email
or update the database if that's the case.
Original issue reported on code.google.com by david.va...@gmail.com on 10 Oct 2008 at 6:06
Original issue reported on code.google.com by
david.va...@gmail.com
on 10 Oct 2008 at 6:06