Actions
Feature #19742
closed[felogin] New Method for "forgotPassword"
Start date:
2008-12-26
Due date:
% Done:
0%
Estimated time:
PHP Version:
5.3
Tags:
Complexity:
Sprint Focus:
Description
The old method has a few issues that makes it possible to annoy other users, a new password is generated if you enter a valid email address.
The new method doesn't allow this and has advantages:- enter username or email
- send email with a link which is valid only for a cinfigured time
- by clicking the link you can enter a new password in a new form
This method supports md5 and salt (if the extensions are installed). It's improved as typo3.org use this patch for some time now.
Attached patch are for trunk and 4_2
(issue imported from #M10017)
Files
Updated by Ingo Renner over 15 years ago
Steffen, I'll have a look at it but I'm not sure yet whether we can do that for 4.2
Actions