[cvs] commit: horde/services resetpassword.php
Marko Djukic
mdjukic at horde.org
Mon May 24 16:01:01 PDT 2004
mdjukic 2004/05/24 16:01:01 PDT
Added files:
services resetpassword.php
Log:
"Forgot password" utility to reset a user's password.
Allows setting of an alternate email and a security question/response to the prefs backend.
Some thoughts:
- This is currently done in the Auth files, should it be better done in the passwd module? Although would be nice to avoid the passwd module requirement just to reset the password.
- The check for driver capability to do a reset is hasCapability('update'), should it be a new capability 'resetpassword' or similar?
- When asking for a password reset, the security question is left to the user to select. Means that the user will have remembered which one was selected in the first place. The alternative is pulling out of the backend the right question for the inserted user, but would mean that probing for users would be quite easy?
- More choice for challenge questions?
Revision Changes Path
1.1 +81 -0 horde/services/resetpassword.php (new)
Chora Links:
http://cvs.horde.org/co.php/horde/services/resetpassword.php?r=1.1
More information about the cvs
mailing list