You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ffb84283c2
The improvements are: - Die with an explicit message when a user is trying to reset his lost password and the option is disabled in config - Redirect user to main page after password change using relative URL - Don't leak info whether user exists or has recovery info defined - Throttle password reset requests to prevent brute force attacks - Show phone/alt email fields in mailbox/admin edit form only when the password reset option is enabled - Make database upgrade code compatible with other databases types - Use the existing password generator to generate OTP. It is now stored in database, unique to each user, valid only for 1 hour and can only by used once. |
7 years ago | |
|---|---|---|
| .. | ||
| css | ||
| images/calendar | ||
| calendar.js | ||
| edit-alias.php | 8 years ago | |
| index.php | 11 years ago | |
| login.php | 7 years ago | |
| main.php | 11 years ago | |
| password-change.php | 7 years ago | |
| password-recover.php | 7 years ago | |
| password.php | 9 years ago | |
| vacation.php | 11 years ago | |