Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: forgot password multiple emails  (Read 7865 times)

0 Members and 1 Guest are viewing this topic.

rollabones

  • Coppermine newbie
  • Offline Offline
  • Posts: 9
forgot password multiple emails
« on: August 16, 2007, 02:06:26 am »

I'm just now setting up and testing 1.4.12. I just tested the forgot password process.

- I clicked "I forgot my password" on login page, entered my email address, and clicked the go button.
- I received an email that said to click on link to have new password emailed to you, so I clicked link.
- This opened a new web browser window, which said it was sending me an email. I then received 3 different emails, each with a different new password.

Steve
http://gallery.rollanet.org/
« Last Edit: August 18, 2007, 05:53:47 pm by Nibbler »
Logged

Nibbler

  • Guest
Re: forgot password multiple emails
« Reply #1 on: August 16, 2007, 04:53:46 am »

Not possible. The forgot password page only sends one email per request.
Logged

rollabones

  • Coppermine newbie
  • Offline Offline
  • Posts: 9
Re: forgot password multiple emails
« Reply #2 on: August 18, 2007, 04:24:05 pm »


I tried it twice on two different computers.

The email is a Yahoo email address. When I click link that says I do want a new password emailed to me, another web browser window opens and I receive more than one email each with a different password. On my Windows 2000 PC I received 3 emails and on my Windows XP PC I received 2 emails.

I changed the email address on my account to another email address which I read using Pegasus Mail. The link was not active in that email, so I copied and pasted it into a web browser and submitted it. I received 2 emails each with a different password.

Steve

Logged

Nibbler

  • Guest
Re: forgot password multiple emails
« Reply #3 on: August 18, 2007, 04:59:41 pm »

Try removing the google ads from the forgot password page.
Logged

rollabones

  • Coppermine newbie
  • Offline Offline
  • Posts: 9
Re: forgot password multiple emails
« Reply #4 on: August 18, 2007, 05:17:16 pm »

I'm not quite sure how to do that, since the Google Ads are in template.html.
Logged

Nibbler

  • Guest
Re: forgot password multiple emails
« Reply #5 on: August 18, 2007, 05:24:49 pm »

Change

Code: [Select]
    if (!$result) {
        cpg_die($lang_forgot_passwd_php['forgot_passwd'], $lang_forgot_passwd_php['illegal_session']);
    }

to

Code: [Select]
    if (!mysql_num_rows($result)) {
        cpg_die($lang_forgot_passwd_php['forgot_passwd'], $lang_forgot_passwd_php['illegal_session']);
    }

Please report back if the fix is correct.
Logged

rollabones

  • Coppermine newbie
  • Offline Offline
  • Posts: 9
Re: forgot password multiple emails
« Reply #6 on: August 18, 2007, 05:46:28 pm »

Yes! That fixed it.

Thanks!!!
Logged
Pages: [1]   Go Up
 

Page created in 0.014 seconds with 20 queries.