[TYPO3-core] RFC: #10017: [felogin] New Method for "forgotPassword"

Steffen Kamper info at sk-typo3.de
Fri Dec 26 14:26:49 CET 2008


Hi,

This is SVN patch request.

Type: Feature

Branches: trunk

BT reference: http://bugs.typo3.org/view.php?id=9885

The old method has a few issues that makes it possible to annoy other 
users, a new password is generated if you enter a valid email address.

The new method doesn't allow this and has advantages:
* enter username or email
* send email with a link which is valid only for a cinfigured time
* by clicking the link you can enter a new password in a new form

This method supports md5 and salt (if the extensions are installed). 
It's improved as typo3.org use this patch for some time now.

Thanks to all the supporters and testers, especially Marcus Krause, 
Ingmar Schlecht and Jeff Segars.

vg Steffen
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: felogin_forget_password_changepassword_4-2-3.diff
Url: http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20081226/3f5a4118/attachment-0002.txt 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: felogin_forget_password_changepassword_trunk.diff
Url: http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20081226/3f5a4118/attachment-0003.txt 


More information about the TYPO3-team-core mailing list