Web Wiz Forums - Password Recovery Process

Print Page | Close Window

Password Recovery Process

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=30811
Printed Date: 30 March 2026 at 12:10pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Password Recovery Process

Posted By: lostcontrol
Subject: Password Recovery Process
Date Posted: 02 August 2013 at 12:54pm

Currently, when someone requires a password recovery to access the forum all he has to do is fill in the Password Recovery form and a new password will be created and emailed to him.

The problem with the current process is that someone can request a new password by providing either a username or an email address of a registered user. Since the usernames are public, anyone can reset someone else's password at any given time!

I believe the password recovery process should change so that it doesn't generate a new random password that is emailed to the user but rather to send a link to the user which will allow him to choose a new password.

Replies:

Posted By: WebWiz-Bruce
Date Posted: 02 August 2013 at 9:05pm

It is on the 'todo' list to look at changing for version 11 as it would require extra database fields.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting