Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
[wiki] Usability/security conflict with password reminder
Manfre emailed me because he forgot his password and didn’t see where in the wiki he could request the reminder. I have never had to think about this before until now, so when I looked, sure enough I couldn’t see it either (when I was not logged in).
I went ahead and deleted his account and recreated a new one.
However, when logging in to create his new account on the front side, the login page changed (admin view) and that’s when I finally saw the “Mail me a new password” button. This suggests that a user cannot request a new, temp password on their own should they forget, but rather have to contact an admin who then has to do it for them. Bahhh!!!
I don’t have an answer to this, I’m just pointing it out.
Speaking of security, Wiki probably needs the upgrade soon.
Last edited by Destry (2006-11-12 15:20:49)
Offline
#2 2006-11-12 19:01:40
- NyteOwl
- Member
- From: Nova Scotia, Canada
- Registered: 2005-09-24
- Posts: 539
Re: [wiki] Usability/security conflict with password reminder
Nice Fez! :)
Obsolescence is just a lack of imagination. / 36-bits Forever! / #include <disclaimer.h>;
Offline
Re: [wiki] Usability/security conflict with password reminder
Destry wrote:
However, when logging in to create his new account on the front side, the login page changed (admin view) and that’s when I finally saw the “Mail me a new password” button. This suggests that a user cannot request a new, temp password on their own should they forget, but rather have to contact an admin who then has to do it for them. Bahhh!!!
Yeah I totally don’t understand the reasoning behind this. This seems to have changed at least in the version currently running Wikipedia so if it’s not there now it will be soon.
Speaking of security, Wiki probably needs the upgrade soon.
It definitely does. I’m ramping up for a marathon upgrading session this week.
Shoving is the answer – pusher robot
Offline