One of the big problems that I can see with the password changing (and yes, I experienced that as well when I used the first version of FB and my brother got to my computer while I was logged in...) is that anyone can change the password WITHOUT HAVING TO ENTER THE PASSWORD AGAIN!.
Here is a usecase: User A logs into the site, leaves the room to get himself some coffee. Meanwhile, little brother of A thinks it would be hilarious to change User As password to something rude, User A comes back, works on site and logs out at the end of the day. The next day he cannot log in anymore. He asks brother, and brother has forgotten... User A is then in s**** since he has his work on there.
What I would suggest is that the user has to enter the password again when he changes his main password (eg OLD PASSWORD + NEW PASSWORD = CHANGED PASSWORDS)
Any possibility to have that?
Last edit: 8 years 1 month ago by krileon. Reason: Added [#6192] tag to subject
Yup, easy enough to add as another verify field. Will add a parameter to toggle it on/off as well encase someone doesn't want it (just like the verify usage).
Kyle (Krileon) Community Builder Team Member Before posting on forums:
Read FAQ thoroughly
+
Read our Documentation
+
Search the forums CB links:
Documentation
-
Localization
-
CB Quickstart
-
CB Paid Subscriptions
-
Add-Ons
-
Forge
-- If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
-- If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please
send me a private message
with your thread and will reply when possible!
-- Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
-- My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.