search

goalio / GoalioForgotPassword

A Zend Framework 2 (ZF2) Module offering forgot password via e-mail functionality to ZfcUser
BSD 3-Clause "New" or "Revised" License
42 stars 49 forks source link

User exists validator #17

Closed Tlapi closed 10 years ago

Tlapi commented 10 years ago

Hi,

there should be a validator to validate if user with given e-mail exists in db. Now, when i enter e-mail which does not exist, it will return "A reminder has been sent to your e-mail address *****". Thats not true at all.

Tlapi commented 10 years ago

PR here: https://github.com/goalio/GoalioForgotPassword/pull/18

pdobrigkeit commented 10 years ago

Hey Tlapi,

that was actually done by design. Otherwise it is possible to get valid e-mail addresses by simply using the reminder service. It would be nice if you could make this an optional thing enabled via the configuration.

Tlapi commented 10 years ago

Hi!

yes, that is what i was also thinking about, but then i realised that you can get valid e-mail addresses the same way, when you try to register and zfcuser will tell you that "this e-mail is already registered" right?

But maybe i can make it optional.

Tlapi commented 10 years ago

Okay, i have made it optional.

You can use 'validate_existing_record' => true in your config now.

pdobrigkeit commented 10 years ago

Merged PR