oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add safeties to avoid password recovery being turned on at all with zero

Browse source 
profile fields selected, to avoid confusion.  Update some documentation.
This commit is contained in:
Drake 2006-12-06 22:31:00 +00:00
parent c909ac9740
commit 574b0313c3
4 changed files with 46 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

10
lib/WebGUI/i18n/English/AuthWebGUI.pm
View file

@ -255,6 +255,16 @@ our $I18N = {
lastUpdated => 1071507760
},
'webguiPasswordRecovery hoverHelp' => {
message => q|Select "Yes" to permit users who know a particular combination of their profile fields to recover their passwords. In order for this to take effect, at least one profile field must have its "Required for password recovery?" flag turned on. It is highly advisable to pick several fields, as using only one field is usually very easy to break; remember that anyone who discovers all of those fields for a user can reset that user's password.|,
lastUpdated => 1071507760
},
'webguiPasswordRecoveryRequireUsername hoverHelp' => {
message => q|Select "Yes" if you want users to also have to enter their username for password recovery. Otherwise, they will be able to reset their password and log themselves in by knowing only the other profile fields that are enabled for password recovery, even if they have forgotten their username.|,
lastUpdated => 1071507760
},
'recovery template title' => {
message => q|WebGUI Authentication Password Recovery Template|,
lastUpdated => 1078856556