Skip to:
Content
Pages
Categories
Search
Top
Bottom

Re: Password Recovery doesn’t check if username exists

If you simply visit /bb-reset-password.php in 0.9.4 the template options are if($reset) and else. The first says “Your password has been reset…”, the second “An email has been sent…”. So if the file is accessed out of context, it is doomed report the else message, even when absolutely nothing has been sent.

Bug-wise, it’s re-written in 1.0.

Skip to toolbar