Re: [Phpgroupware-users] password retieval - is it possible for user to request lost password

[Phredd]

thanks for reply, chris.

True, it would be possible to generate pw.
However, then someone could then request a new
password for someone else by entering the other
person's email address; thus harrasing them by
changing their password each day.

Perhaps the md5 function could be removed, enabling
someone to enter an email address and have their
password sent to them ... ?

Thanks
Phredd



--- Chris Weiss <address@hidden> wrote:
> Phredd K (address@hidden) wrote*:
> >
> >hello,
> >
> >is it possible for users to retrieve lost
> passwords?
> >(be having them sent to email address, for example)
> >
> >this appears impossible as passwords are 'hashed'
> >using md5 before being stored in the phpgw_accounts
> >table ?
> 
> Correct.  It would however be possible to generate a
> new random password and send
> that to them.
> 
> >
> >tia
> >phredd
> >
> >__________________________________________________
> >Do you Yahoo!?
> >HotJobs - Search new jobs daily now
> >http://hotjobs.yahoo.com/
> >
> >
> >_______________________________________________
> >Phpgroupware-users mailing list
> >address@hidden
>
>http://mail.gnu.org/mailman/listinfo/phpgroupware-users
> >
> 
> 
> 
> _______________________________________________
> Phpgroupware-users mailing list
> address@hidden
>
http://mail.gnu.org/mailman/listinfo/phpgroupware-users


__________________________________________________
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/