You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I just became aware of this change
and honestly I'm not really happy with it.
Now, any evil community member can use any other member's username and run the reset action.
He can do it as often as he wants, so this may result in a real spamming pain. And besides all that: you don't even know who the idiot was.
If we want to stay with this option it should be combined at least with a second parm (e.g. date of birth) to be checked.
githubertus
pushed a commit
to githubertus/opensource-socialnetwork
that referenced
this issue
Nov 13, 2017
allow to reset password with username or email
The text was updated successfully, but these errors were encountered: