Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: "Forgot Password" "Sending Email" Question  (Read 6561 times)

0 Members and 1 Guest are viewing this topic.

Jarvhix

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 38
"Forgot Password" "Sending Email" Question
« on: September 17, 2005, 11:04:26 pm »
I' must ask this because to me it is important (thinking security) for members. Why would anyone be able to put in a user's name when they click on forgot password and then the system shows where they're sending the password to-- as in showing the user's email address. This means anyone can come in a get email address of users simply by knowing the user's name and clicking on the "forgot password" box. Is this something that cannot be fixed!!
« Last Edit: September 19, 2005, 11:18:33 pm by GauGau »
Logged

casNuy

  • Moderator
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 671
  • My other hobby
    • Nuy Community
Re: "Forgot Password" "Sending Email" Question
« Reply #1 on: September 18, 2005, 02:15:25 pm »
Wrong forum, this is not with pnCPG.

Cas
Logged

Jarvhix

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 38
Re: "Forgot Password" "Sending Email" Question
« Reply #2 on: September 18, 2005, 03:10:24 pm »
ok, can you point me to the right forum? I'm confused as to where to post my question.
Logged

casNuy

  • Moderator
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 671
  • My other hobby
    • Nuy Community
Re: "Forgot Password" "Sending Email" Question
« Reply #3 on: September 18, 2005, 03:16:47 pm »
Logged

Jarvhix

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 38
Re: "Forgot Password" "Sending Email" Question
« Reply #4 on: September 18, 2005, 03:23:32 pm »
oh thanks. I just posted in a forum for "ecards & email". Maybe it too was the wrong forum. I will check out the link you sent m. Thanks.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: "Forgot Password" "Sending Email" Question
« Reply #5 on: September 19, 2005, 11:18:22 pm »
Quote from: casNuy on September 18, 2005, 03:16:47 pm
suggest you go here :
http://forum.coppermine-gallery.net/index.php?board=12.0
this is wrong!

Quote from: Jewels on September 18, 2005, 03:23:32 pm
oh thanks. I just posted in a forum for "ecards & email". Maybe it too was the wrong forum.
No, posting there was correct.

Closing this thread now.
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.017 seconds with 15 queries.