Not signed in (Sign In)

Categories

Vanilla 1.1.5 is a product of Lussumo. More Information: Documentation, Community Support.

Help keep Vanilla free:
Welcome Guest!
Want to take part in these discussions? If you have an account, sign in now.
If you don't have an account, apply for one now.

General Support & Troubleshooting: password reset request displays email address

Bottom of Page

1 to 25 of 25

  1.  
    • CommentAuthorblubber
    • CommentTimeAug 17th 2006
     # 1
    ... even when the members email is hidden in his account, so everyone can type in a username in the request form and see the email address

    another thought to increase security is not to display the username in the support email ('hello username,') but to ask for the username in the pwd reset form?!
    •  
      CommentAuthorbugsmi0
    • CommentTimeAug 17th 2006
     # 2
    I don't understand what request form ? You mean when applying as a new member ?i tried it and nothing like that happen
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 17th 2006
     # 3
    when you forgot your password... If I ask to reset your password, I will know your email address
    •  
      CommentAuthorbugsmi0
    • CommentTimeAug 17th 2006 edited
     # 4
    ah I see when you submit the form, interesting anyway to hide it ?

    I figured how to get ride of it, in english definitions, line 109 remove the //1 and it removes the email so you don't see it
    •  
      CommentAuthorWallPhone
    • CommentTimeAug 17th 2006
     # 5
    Agreed. This is a bit problematic if, say a spambot runs the user list against this form to collect email addresses... but it is useful so the user can see which of his dozens of email accounts he happened to register with...

    Perhaps we need a delegate here so that, if one wanted, we could parse out the mailbox name of the address and just return the domain... Or just do that by default in the core?
  6.  # 6
    All we really need to do is port the JS function which is serving emails to the profile page to make it serve them to that page too. It was probably just an oversight on marks part.
    •  
      CommentAuthorWallPhone
    • CommentTimeAug 17th 2006
     # 7
    Maybe so, but I still believe its a security breach to make avaliable an email address that is believed private.
  8.  # 8
    Hmmm. I guess so.
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 17th 2006
     # 9
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 17th 2006 edited
     # 10
    umm found 2 mistakes... still debugging
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 17th 2006 edited
     # 11
    I have got a problem to extends the UserManager class. I tried:class UserManagerPatchRequestPasswordReset extends UserManager {...
    And got this error message:PHP Fatal error: Class 'UserManager' not found in /home/dinoboff/public_html/extensions/PatchRequestPassword/default.php
    Any idea?
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 17th 2006 edited
     # 12
    Ok it is working...

    Download http://lussumo.com/addons/?PostBackAction=AddOn&Success=1&AddOnID=142,
    install it in the extensions folder,
    And enable the extension.

    NB: It is only work with Vanilla 1.0. If you are using vanilla 1.0.1 from the svn, you will have to wait the next update of Mark.
    Also, if you need to translate the extension you just need to add "$Context->Dictionary['PatchRequestPasswordResetYourMail'] = 'your email'; in conf/language.php;"
    •  
      CommentAuthorbugsmi0
    • CommentTimeAug 18th 2006
     # 13
    its not working with 1.0 only get a blank page
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006
     # 14
    will check that...
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006
     # 15
    Where do you get a blank screen?
    Do you have access to error.log? what is the error message?
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006 edited
     # 16
    I don't have a blank screen (so please give me your error message).
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006 edited
     # 17
    oups I trought you were talking about the email verification extension...
    I checked on vanilla 1.0, (apache 2.0.59, php 5.1.2) and it is working fine for me. Do you have the error message?
    •  
      CommentAuthorbugsmi0
    • CommentTimeAug 18th 2006 edited
     # 18
    strangest thing without ever enabling it, just copying it into extensions folder it results in a blank page,

    i haven't check error log how do I do that on mac ?
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006 edited
     # 19
    OS X is like linux?

    something like /var/log/error.log or /var/log/httpd/error.log or /var/log/apache/error.log
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 18th 2006
     # 20
    I think it is "/private/var/log/httpd/error_log"
    •  
      CommentAuthorbugsmi0
    • CommentTimeAug 19th 2006
     # 21
    error log doesn't show anything
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 19th 2006
     # 22
    umm, a fatal error, without error message?
    I don't know what can be the problem
    •  
      CommentAuthorstinger
    • CommentTimeAug 22nd 2006
     # 23
    This one causes some big problems on my forum

    First it displayed a syntax error on line 94 and the whole forum was unaccessable
    Now I deleted the extension but the forum still displays error messages as it can't find the extension... aah!
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 22nd 2006 edited
     # 24
    you have to go conf/extensions.php, and delete the line to this extension.

    I would be interested to see the error message when the extension was installed, if possible.
    •  
      CommentAuthorDinoboff
    • CommentTimeAug 22nd 2006
     # 25
    I don't know what was the problem, but I uploaded a new version (0.1.3) that works.

1 to 25 of 25

  1.  
Add your comments
    Username Password
  • Format comments as
 
Back to Discussions Top of Page