Change to way passwords are reset

Posted by Nick Gammon on Sun 24 Jun 2012 12:48 AM — 1 posts, 8,584 views.

Australia Forum Administrator #0
The forum can no longer retrieve your current password, as passwords are stored in a hashed form.

If you forget your password you must request it to be reset.

To guard against a denial of service attack against another forum user (eg. someone resets *my* password) the request for a new password now generates an email to the person holding the forum account.

You must follow a link in that email to have the password reset. Then the new password is emailed to you.

If the link is not followed the password is not reset.

After the password has been reset you may use the forum "Edit Profile" link to change the password to one of your own choosing.