[drupal-devel] [feature] Request New Password Security

chx drupal-devel at drupal.org
Fri Mar 11 21:57:58 UTC 2005

Issue status update for http://drupal.org/node/18755

 Project:      Drupal
 Version:      cvs
 Component:    user.module
 Category:     feature requests
 Priority:     normal
 Assigned to:  chx
 Reported by:  chx
 Updated by:   chx
 Status:       patch
 Attachment:   http://drupal.org/files/issues/userreg.patch (808 bytes)

To quote http://drupal.org/node/18689
If someone requests a new password... Don't blindly change it... send
an email that says...."Is this a real request authorized by you? Click
here to confirm otherwise disregard this message"

Answer froim moshe weitzman - March 10, 2005 - 22:13:
noone has contributed code for this. it is desired by all, i'm sure.

I do not think that such a patch can be ready for 4.6 -- although there
is a good start at the aforementioned node -- what I ask for is a simple
way to change the callback function for user/password.


More information about the drupal-devel mailing list