| Get a new password with just your email |
|
| Tuesday, 30 January 2007 | |
|
Two posts today, because I wanted some good news to counteract the problems with Virtuemart mentioned in the post below. Early this week we found a great little hack, built by benneh over at the Joomla.org forum. It allows people to get a new password without having to remember their username. People nearly always forget their username and so this makes it much more likely that people will return to your site if they no longer have their details.
Comments (4)
![]()
...
written by aravot, May 24, 2007
Though not a security issue but a nuisance why well before at least two info field required but with only email address required and most users email can be obtained from their user profile one can misuse this by keep resetting someone else?s password, instead of resetting the password it would be better to send a message with a link to reset the password.
I know resetting password is by default in Joomla I have already contacted Louise to change this for J!1.5 Write comment
|



Sean
p.s. The "Username" field on your example page is still shown