This 'bug' I found yesterday, To provide a bit more background in what I found: One time link works fine, as long as you are only updating your password.
If you edit any other information (especially the Country) then click submit (or whatever the button is, I am failing to remember right now) it will correctly reset your password to the new one you entered, but it will respond stating that you need to enter your current password to continue. To prevent this from happening, either the Country needs to not update the page, or make the password reset a single option in another portion of the page. This is the problem I experienced anyway, ymmv. ~Richard McIntyre On Sun, Apr 20, 2014 at 4:36 PM, Valorie Zimmerman < [email protected]> wrote: > On Fri, Mar 28, 2014 at 1:53 PM, Bri Hatch <[email protected]> wrote: > > > > If you need to reset your LFNW website password, it sends you a > one-time-use > > link to log you in. When you go to the password change form, however, you > > need to put in the password you don't know to be able to change it to > > something you do know. > > > > -- > > Bri Hatch, Systems and Security Engineer. http://www.ifokr.org/bri/ > > This bug has just bit me. Have I already registered? I think so, but > can't check. > > Valorie > > -- > http://about.me/valoriez > _______________________________________________ > Fest-list mailing list > [email protected] > http://lists.blug.org/cgi-bin/mailman/listinfo/fest-list >
_______________________________________________ Fest-list mailing list [email protected] http://lists.blug.org/cgi-bin/mailman/listinfo/fest-list
