You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
postfixadmin/templates
Sylvain Tissot ffb84283c2
Harden password reset process
The improvements are:

- Die with an explicit message when a user is trying to reset his lost password and the option is disabled in config
- Redirect user to main page after password change using relative URL
- Don't leak info whether user exists or has recovery info defined
- Throttle password reset requests to prevent brute force attacks
- Show phone/alt email fields in mailbox/admin edit form only when the password reset option is enabled
- Make database upgrade code compatible with other databases types
- Use the existing password generator to generate OTP. It is now stored in database, unique to each user, valid only for 1 hour and can only by used once.
7 years ago
..
backupwarning.tpl backup.php: 11 years ago
broadcast-message.tpl Fix issue with checkbox in broadcast 8 years ago
editform.tpl Add CSRF protection for POST requests 9 years ago
flash_error.tpl flash_error.tpl: 13 years ago
footer.tpl Links with target="_blank" should have rel="noopener" 7 years ago
header.php - accidentially deleted header.php. Needed for setup 15 years ago
header.tpl header.tpl: 11 years ago
index.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
list-virtual.tpl list-virtual.tpl: add missing "download as CSV" for mailboxes 8 years ago
list-virtual_alias.tpl Use list.tpl to display the alias list 10 years ago
list-virtual_alias_domain.tpl list-virtual_alias_domain: 9 years ago
list-virtual_mailbox.tpl migrate search input field to use search[_], and use list.tpl for alias domains 10 years ago
list.tpl list.tpl: 9 years ago
login.tpl Harden password reset process 7 years ago
main.tpl *.lang: 11 years ago
menu.tpl Switch config item for broadcast. 8 years ago
message.tpl message.tpl: 14 years ago
password-change.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
password-recover.tpl Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18 7 years ago
password.tpl Add CSRF protection for POST requests 9 years ago
sendmail.tpl Add CSRF protection for POST requests 9 years ago
users_edit-alias.tpl Add CSRF protection for POST requests 9 years ago
users_main.tpl added config option to disable "edit_alias" function for users 8 years ago
users_menu.tpl added config option to disable "edit_alias" function for users 8 years ago
vacation.tpl Add CSRF protection for POST requests 9 years ago
viewlog.tpl use $CONF[page_size] in viewlog.php 8 years ago