When you change your password it doesn’t ask for your current password, which is an important security measure. Need to check the entered current password matches the logged in user’s password, before allowing the user to change their password. This needs to be done in a secure way so that the password information cannot be intercepted via external sources.
zaclochhead
commented
6 years ago
When you change your password it doesn’t ask for your current password, which is an important security measure. Need to check the entered current password matches the logged in user’s password, before allowing the user to change their password. This needs to be done in a secure way so that the password information cannot be intercepted via external sources.