I'm considering different ways to implement a "Forgot Password" feature. I normally see it done one of two ways.
1. On registration, get a Question and Answer from user. Ask them this question when they forget their password. On correct answer, let them change password. I don't have any questions on implementing this method. 2. When password is forgotten, they put in their email address. A confirmation email is sent to user and they must click onto a link. On the response page, they can change their password. My preference is to implement #2. But I'm unclear on how to create a "confirmation link" and a page to read it. I'd need to add a unique key of some sort to a URL. That URL can't be session specific. Any suggestions on how to format this confirmation URL and what would need to go into the page's java to read the key from the URL? Thanks! Tauren ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
