Create an account


Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[SUGGESTION] Forum password reset security

#1
I notice the mechanism for resetting a password for the Xonotic Forums has quite an insecure step: your new, temporary password is sent in plaintext to your email account. Secondly, once you login using this password you are not automatically taken to the change password screen, instead being dropped off at the main page.

Would it be possible to have the first password reset link take you to a page where you can enter your new password straight away, rather than leaving the account somewhat more vulnerable until the user changes their password manually?
Post received signal SIGSEGV, Segmentation Fault
Reply

#2
I don't see how your alternative would make it any harder from an adversarial point of view. It would make it less foolproof by forcing users to change their passwords, but that's all.

Anyway, I couldn't find a way. Sorry :x
[Image:http://i.imgur.com/4XODR.png]640K ought to be enough for anybody.
     ― Linux Torvalds
Reply



Possibly Related Threads...
Thread Author Replies Views Last Post
  [BUG] No proper Unicode handling in forum Lyberta 2 116 08-14-2019, 11:43 AM
Last Post: Lyberta
  [SUGGESTION] Discourse Forum PetaByteBoy 9 3,759 03-08-2016, 01:46 PM
Last Post: Beagle
  [SUGGESTION] a sub-forum for user and game server admin communication BuddyFriendGuy 6 2,824 09-04-2015, 02:12 AM
Last Post: BuddyFriendGuy
  [SUGGESTION] Sorting forum members by reputation? unfa 11 8,683 11-11-2013, 05:01 AM
Last Post: edh
Information [SUGGESTION] Idea: Forum cleanup? Samual 14 13,013 10-22-2013, 09:14 AM
Last Post: unfa
  [SUGGESTION] WOULD LIKE A CTS VID SECTION IN FORUM chooksta 7 4,111 11-29-2011, 04:09 AM
Last Post: PinkRobot
  [SUGGESTION] Forum section: International Exitium 16 10,195 09-29-2011, 04:22 AM
Last Post: RaptorFX
  [SUGGESTION] Requests for the forum Mirio 10 6,407 08-12-2011, 10:35 AM
Last Post: kojn^
Wink [SUGGESTION] "Gamename" field for Xonotic forum Soelen 0 2,094 04-27-2011, 04:28 PM
Last Post: Soelen
  [SUGGESTION] Forum suggestion - Development Help area MirceaKitsune 1 2,826 04-06-2011, 01:05 PM
Last Post: nowego4

Forum Jump:


Users browsing this thread:
1 Guest(s)

Forum software by © MyBB original theme © iAndrew 2016, remixed by -z-