Chockstone Forum

      Sponsored By
      ROCK
   HARDWARE

Chockstone Photography

Australian Landscape Prints

Chockstone Forum - Chockstone Feedback

Provide Feedback About This Website

Topic Date User

Forgotten Passwords 4-Jul-2005 At 9:38:44 AM Mike

Message

I'm getting, on average, about 3 or 4 "I've forgotten my password" type emails each week. While that doesn't sound like much, it does take 5 minutes to look that user up in the database, verify that they at least emailed me from the same account they registered with, and then send them an email with their password in it. So I'm wondering if this process could be automated?

Does anyone know how other forums go about handling loss of password problems?

Would it be feasible to have a place on Chockstone where anyone could enter a username and have the forum send a message containing the password to the email address in the user's profile? Can anyone see a way that might be used to hack someone elses password?

I guess it would be possible for someone to maliciously cause the forum to send said email to a member other than themselves, though quite why anyone would do that I'm not sure. Perhaps a date/time stamp could be recorded and used to limit email requests to one per day per user.