Message4358
Roundup allows you to request a password reset request
(/user?@template=forgotten). After stating an username Roundup confirms
this request with "Email sent to EMAILADRESS". This allows to tap addresses.
My rfe would be to change this to "Email send to USER@..." (by omitting
the domain) or simply "Email with password request has been sent." |
|
| Date |
User |
Action |
Args |
| 2011-08-05 10:00:33 | luke | set | recipients:
+ luke |
| 2011-08-05 10:00:33 | luke | set | messageid: <1312538433.28.0.0759906254356.issue2550716@psf.upfronthosting.co.za> |
| 2011-08-05 10:00:33 | luke | link | issue2550716 messages |
| 2011-08-05 10:00:32 | luke | create | |
|