Dylan Jenkinson wrote:
>
>I have tried constructing a URL similar to the last problem, but while 
>it lets me into the users options, it doesn't actually change their 
>password. I have tried the following:
>
>http://[istdomain]/options/inex/[emailsddress]?password=[adminpw]&newpw=[newpw]&confpw=[newpw]
>http://[istdomain]/options/inex/[emailsddress]?newpw=[newpw]&confpw=[newpw]&password=[adminpw]


Either of the above is almost right (order doesn't matter). You're
missing the submit button. You need to add

  &changepw

to either of the above. You don't have to give it a value as we only
check for its presence.

-- 
Mark Sapiro <[EMAIL PROTECTED]>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list
[email protected]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&amp;file=faq01.027.htp

Reply via email to