Project

General

Profile

Actions

Feature #19742

closed

[felogin] New Method for "forgotPassword"

Added by Steffen Kamper over 15 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Should have
Category:
-
Target version:
-
Start date:
2008-12-26
Due date:
% Done:

0%

Estimated time:
PHP Version:
5.3
Tags:
Complexity:
Sprint Focus:

Description

The old method has a few issues that makes it possible to annoy other users, a new password is generated if you enter a valid email address.

The new method doesn't allow this and has advantages:
  • enter username or email
  • send email with a link which is valid only for a cinfigured time
  • by clicking the link you can enter a new password in a new form

This method supports md5 and salt (if the extensions are installed). It's improved as typo3.org use this patch for some time now.

Attached patch are for trunk and 4_2
(issue imported from #M10017)


Files

felogin_forget_password_changepassword_4-2-3.diff (32 KB) felogin_forget_password_changepassword_4-2-3.diff Administrator Admin, 2008-12-26 14:24
felogin_forget_password_changepassword_trunk_v2.diff (21.6 KB) felogin_forget_password_changepassword_trunk_v2.diff Administrator Admin, 2008-12-27 01:04
10017_trunk_v5.diff (20.2 KB) 10017_trunk_v5.diff Administrator Admin, 2009-04-24 18:26
10017_v11.diff (21.7 KB) 10017_v11.diff Administrator Admin, 2009-09-04 00:47
Actions #1

Updated by Ingo Renner over 15 years ago

Steffen, I'll have a look at it but I'm not sure yet whether we can do that for 4.2

Actions #2

Updated by Steffen Kamper over 14 years ago

committed v11 to trunk, rev 5891

Actions

Also available in: Atom PDF