I' must ask this because to me it is important (thinking security) for members. Why would anyone be able to put in a user's name when they click on forgot password and then the system shows where they're sending the password to-- as in showing the user's email address. This means anyone can come in a get email address of users simply by knowing the user's name and clicking on the "forgot password" box. Is this something that cannot be fixed!!
Wrong forum, this is not with pnCPG.
Cas
ok, can you point me to the right forum? I'm confused as to where to post my question.
suggest you go here :
http://forum.coppermine-gallery.net/index.php?board=12.0
oh thanks. I just posted in a forum for "ecards & email". Maybe it too was the wrong forum. I will check out the link you sent m. Thanks.
Quote from: casNuy on September 18, 2005, 03:16:47 PM
suggest you go here :
http://forum.coppermine-gallery.net/index.php?board=12.0
this is wrong!
Quote from: Jewels on September 18, 2005, 03:23:32 PM
oh thanks. I just posted in a forum for "ecards & email". Maybe it too was the wrong forum.
No, posting there was correct.
Closing this thread now.