1 Topic by chrizz (edited by chrizz 2006-02-09 18:43)

  • From: Eskilstuna, Sweden
  • Registered: 2004-05-23
  • Posts: 143

Topic: New password validation (possible "bug")

Situation:

User requests new password (via the login page while the user is not logged in).

User logs in with old password and saves the login (cookies).

Users recieves email with new password activation link and visits the link.

Result: nothing happens. The password is not changed until the user loggs out and then visits the link.

This is confusing for many people and in my opinion users should be logged out when an valid activation link is visited.

chrizz's Website

2 Reply by Elzar

  • Elzar
  • Senior Member
  • Offline
  • Registered: 2005-07-16
  • Posts: 309

Re: New password validation (possible "bug")

It's not a bug though is it? If you are logged in why would you request a new password....

  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: New password validation (possible "bug")

Noted.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

  • From: Eskilstuna, Sweden
  • Registered: 2004-05-23
  • Posts: 143

Re: New password validation (possible "bug")

Elzar wrote:

It's not a bug though is it? If you are logged in why would you request a new password....

Well, people do all kind of stuff. Just becouse it's not likely or reasonable to do something you can bet that someone will do it anyway.

chrizz's Website