[geeklog-devel] Lost password

[Simon Lord]

LOL, the second I saw dirk's name this post popped into my head.  Ahh, 
still working on that first coffee....

On Monday, May 5, 2003, at 10:05 AM, Dirk Haun wrote:

> Simon Lord <slord at marelina.com> wrote:
>
>> How do we address an ass that wants to be a pain and sits patiently
>> entering usernames into the lost password form requesting new 
>> passwords
>> for as many users as they can?
>
> Okay, obviously nobody saw my posting over at geeklog-devtalk, so 
> here's
> a quote:
>
>>    http://project.geeklog.net/~dhaun/
>>
>> When you request a new password (via the "forgot password" link, as
>> usual), you will receive an email with a unique link in it. Following
>> this link will allow you to enter a new password directly.
>>
>> This is a first implementation, so it's lacking things like speed 
>> limits
>> and an auto-expiry of the unique link. I would like to see some 
>> comments
>> on the overall handling, though, please.
>
> Most of this made it into CVS this morning, btw.
>
> I will be adding a speed limit to this, too. But the beauty of the new
> solution is that you can simply ignore the emails and your password 
> will
> remain intact.
>
> bye, Dirk
>
>
> -- 
> http://www.haun-online.de/
> http://www.macosx-faq.de/
>
> _______________________________________________
> geeklog-devel mailing list
> geeklog-devel at lists.geeklog.net
> http://lists.geeklog.net/listinfo/geeklog-devel
>
>
Sincerely,
Simon