Hmm, good point... I think we could make the expiry configurable in the ACP
Posts made by psychobunny
-
RE: I lost my password and the password reset doesn't work.
-
RE: I lost my password and the password reset doesn't work.
Wait what? So I could ddos that route and send 99999 emails to a user?
We just limit password requests until the password reset link expires (1 hour I think). The link either goes to your inbox or junk, no need for multiple requests I think.
-
RE: I lost my password and the password reset doesn't work.
Interestingly enough, someone actually did send me a password reset email.. :p
-
RE: I lost my password and the password reset doesn't work.
Ah, yeah you should add more numbers and stuff. Post it here and I'll help you make it more secure :D
EDIT: Im totally gonna get in trouble for trying to reverse troll you guys :p
https://what.thedailywtf.com/t/testing-other-forum-devs-tolerance-for-candlejack-jokes/51323/
BANNED.
-
RE: I lost my password and the password reset doesn't work.
What can I say, I love kale and uhh... The Canadian Journal of Cardiology. Gotta add some capital letters and numbers to be real secure.
-
I lost my password and the password reset doesn't work.
I tried a few times, and checked my spam too.
Anyways some helpful guy from TDWTF called @Candlejack1 told me to post my password here and the admins would be able to sort it out.
psychobunny / kale1andCjc
Please be discreet, I use this for my bank accounts and my https://nodebb.org account.