forgot password multiple emails forgot password multiple emails
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

forgot password multiple emails

Started by rollabones, August 16, 2007, 02:06:26 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

rollabones

I'm just now setting up and testing 1.4.12. I just tested the forgot password process.

- I clicked "I forgot my password" on login page, entered my email address, and clicked the go button.
- I received an email that said to click on link to have new password emailed to you, so I clicked link.
- This opened a new web browser window, which said it was sending me an email. I then received 3 different emails, each with a different new password.

Steve
http://gallery.rollanet.org/

Nibbler

Not possible. The forgot password page only sends one email per request.

rollabones


I tried it twice on two different computers.

The email is a Yahoo email address. When I click link that says I do want a new password emailed to me, another web browser window opens and I receive more than one email each with a different password. On my Windows 2000 PC I received 3 emails and on my Windows XP PC I received 2 emails.

I changed the email address on my account to another email address which I read using Pegasus Mail. The link was not active in that email, so I copied and pasted it into a web browser and submitted it. I received 2 emails each with a different password.

Steve


Nibbler

Try removing the google ads from the forgot password page.

rollabones

I'm not quite sure how to do that, since the Google Ads are in template.html.

Nibbler

Change


    if (!$result) {
        cpg_die($lang_forgot_passwd_php['forgot_passwd'], $lang_forgot_passwd_php['illegal_session']);
    }


to


    if (!mysql_num_rows($result)) {
        cpg_die($lang_forgot_passwd_php['forgot_passwd'], $lang_forgot_passwd_php['illegal_session']);
    }


Please report back if the fix is correct.

rollabones