[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Phpgroupware-users] password retieval - is it possible for user to
Re: [Phpgroupware-users] password retieval - is it possible for user to request lost password
Sun, 3 Nov 2002 06:45:58 -0800 (PST)
thanks for reply, chris.
True, it would be possible to generate pw.
However, then someone could then request a new
password for someone else by entering the other
person's email address; thus harrasing them by
changing their password each day.
Perhaps the md5 function could be removed, enabling
someone to enter an email address and have their
password sent to them ... ?
--- Chris Weiss <address@hidden> wrote:
> Phredd K (address@hidden) wrote*:
> >is it possible for users to retrieve lost
> >(be having them sent to email address, for example)
> >this appears impossible as passwords are 'hashed'
> >using md5 before being stored in the phpgw_accounts
> >table ?
> Correct. It would however be possible to generate a
> new random password and send
> that to them.
> >Do you Yahoo!?
> >HotJobs - Search new jobs daily now
> >Phpgroupware-users mailing list
> Phpgroupware-users mailing list
Do you Yahoo!?
HotJobs - Search new jobs daily now