[geeklog-devtalk] requesting passwords

[Jamie Wilson]

hey,

when a user goes to /users.php?mode=getpassword or similar, the english 
text (and possibly others) indicates that a username or email address 
should be enough to get your account details.

which doesn't seem to work at the moment. line 322 of users.php should 
become:

     $result = DB_query ("SELECT uid,email,passwd FROM 
{$_TABLES['users']} WHERE (username = '$username' OR email = 
'$username')");

or similar, right?

...j



---
http://my.blogthing.com/
Get your own blog for free in less than 30 seconds.