Closed alfonsodg closed 10 years ago
From sebastianovide@gmail.com on August 11, 2009 09:39:57
\ This is NOT a web2py bug. I have added it here to keep it in mind. **
as from http://groups.google.com/group/web2py/browse_thread/thread/8425772ffec9785/e809bbfe77f739b9?lnk=gst&q=password+recovery+bug#e809bbfe77f739b9 change the "retrieve password" behaviour. It is very annoying that anybody can chage my password....
or (for backward compatibility) create a new "reset password" that uses some more conventional process....
Original issue: http://code.google.com/p/web2py/issues/detail?id=47
From massimod...@gmail.com on August 13, 2009 08:30:33
Good point. I will take a patch to do this.
Status: Accepted
From massimod...@gmail.com on January 24, 2010 11:00:38
Status: Fixed
From sebastianovide@gmail.com on August 11, 2009 09:39:57
\ This is NOT a web2py bug. I have added it here to keep it in mind. **
as from http://groups.google.com/group/web2py/browse_thread/thread/8425772ffec9785/e809bbfe77f739b9?lnk=gst&q=password+recovery+bug#e809bbfe77f739b9 change the "retrieve password" behaviour. It is very annoying that anybody can chage my password....
or (for backward compatibility) create a new "reset password" that uses some more conventional process....
Original issue: http://code.google.com/p/web2py/issues/detail?id=47