パスワードを忘れた場合はユーザ名ではなく、メールアドレスで設定するようにして欲しい。
ユーザー名は外部からでもわかってしまうから悪戯できてしまうから。
現状だと私がAAAのユーザー名を悪用して100通ぐらいのパスワード再設定のメールを送ることもできてしまうでしょう。
何度も要望を言って申し訳ない。個人的には上の要望と同じメールアドレスの登録ができないようになれば満点のスクリプトです。
忙しいと思うので返信はいりません。
![[deleted user]](https://secure.gravatar.com/avatar/695023b4efd563721d13716b1457bc73.png?d=identicon&mode=crop&r=PG&s=42)
Rating
52
Translation / English
- Posted at 07 Jun 2013 at 10:16
I suggest you to use the email address to reset the password, if it is forgotten, instead of the user name because user name may be hacked by an outsider to do something wrong.
Current method allow me to abuse using a user name AAA and sending out 100 email for resetting the password
I’m sorry for repeating many requests. Personally, I will be satisfied with the script if a mail address cannot be registered using the method I mentioned above.
Please don’t reply this email because you are busy I think.
shokotan likes this translation
Current method allow me to abuse using a user name AAA and sending out 100 email for resetting the password
I’m sorry for repeating many requests. Personally, I will be satisfied with the script if a mail address cannot be registered using the method I mentioned above.
Please don’t reply this email because you are busy I think.
Rating
52
Translation / English
- Posted at 07 Jun 2013 at 10:20
When password is forgot, it would be better to reset via e-mail address rather than a user name.
User names could be known by others. Resetting password by user name might cause problems.
For example, I can use AAA's user name to sent password reset requirement e-mail for more than 100 times.
I'm sorry for being demanding again and again. Personally speaking, it would a perfect script if the feature mentioned above is added as well as the rule that same e-mail address can not be used to register for more than once.
Reply is not needed if you are too busy.
shokotan likes this translation
User names could be known by others. Resetting password by user name might cause problems.
For example, I can use AAA's user name to sent password reset requirement e-mail for more than 100 times.
I'm sorry for being demanding again and again. Personally speaking, it would a perfect script if the feature mentioned above is added as well as the rule that same e-mail address can not be used to register for more than once.
Reply is not needed if you are too busy.
Rating
52
Translation / English
- Posted at 07 Jun 2013 at 10:22
If you forget your password, please set it up using your email address, not user name. The username can be seen from outside and could be used illegally.
At the moment, I can abuse using the username AAA, and send around 100 emails asking resetting new passwords.
Sorry for asking you about it so many times. Personally speaking, its a perfect script if people can't make a same email address as the one above.
I think you are busy, so please don't worry about replying to this message.
At the moment, I can abuse using the username AAA, and send around 100 emails asking resetting new passwords.
Sorry for asking you about it so many times. Personally speaking, its a perfect script if people can't make a same email address as the one above.
I think you are busy, so please don't worry about replying to this message.
Rating
60
Translation / English
- Posted at 07 Jun 2013 at 10:16
I want you to make the system whose setting is by mail address not by user name if one forgets pass word. Because user name is publicly known and someone can trick.
In current system I can trick to send 100 pass word resstting mails under the name of AAAA falsely.
I'm sorry for my frequent requests. I think personally that is fully safisfactory script if request described above and disabling registration by same mail address are fullfilled .
I don't need your reply because you seem busy.
shokotan likes this translation
In current system I can trick to send 100 pass word resstting mails under the name of AAAA falsely.
I'm sorry for my frequent requests. I think personally that is fully safisfactory script if request described above and disabling registration by same mail address are fullfilled .
I don't need your reply because you seem busy.
