Search found 145 matches

by Albert Wiersch
Mon Oct 31, 2011 2:15 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Big-Jim wrote:The developers of the phpBB forum software have already included an easy and secure way to do it.
Not if you forgot your username.
by Albert Wiersch
Mon Oct 31, 2011 1:23 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

You sure do presume a lot. You presume that people who don't anal-retentively write their passwords down in triplicate are unintelligent and unworthy of your glorious board. You presume that people don't browse the Web (and forums) during their lunch hours and that no companies allow that as accept...
by Albert Wiersch
Mon Oct 31, 2011 2:25 am
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

It is not possible to only use email addresses. The relation between user accounts and email addresses is surjective but not injective. And now in English: It is possible for one email address to correspond to more than one user account in some configurations of phpBB. But it could work when the em...
by Albert Wiersch
Mon Oct 31, 2011 12:06 am
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Not necessarily. I've noticed that in other reports, but was told that just means that's the earliest release that it may be worked on. If it doesn't get fixed in that release, they'll just bump it to the next release. If you look at the Resolution field, it still says "Unresolved", not "Fixed". Th...
by Albert Wiersch
Sun Oct 30, 2011 1:31 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Wow... I'm amazed at how many people seem to be against or indifferent to someone being able to recover their lost password by remembering only their email address, which is pretty standard I should think. I'm not going to spend any more time on this thread... besides, it seems this has already been...
by Albert Wiersch
Sun Oct 30, 2011 1:01 am
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Not everyone forgets their username either. If nothing else, tell your membership to write down their username, password and email address, and keep it in a notebook near their computer. Yes, and people always do stuff like that when they're told, and never lose their notebook. Sorry, but I felt a ...
by Albert Wiersch
Sun Oct 30, 2011 12:59 am
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Your password isn't changed unless you click the link in the E-mail, so all that sending those requests would do is annoy people. Yes, I'm aware of that... but why annoy people? Why put an unnecessary and potentially harmful load on the server? What if the server gets blacklisted for sending lots o...
by Albert Wiersch
Sat Oct 29, 2011 8:59 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

It didn't sound like an example to me, it sounded like he was worried about losing members because they forgot their username. I read over the topic/thread again and thought the same thing. I don't want to lose members or posts because of a usability issue that is easy to address. The poster who br...
by Albert Wiersch
Sat Oct 29, 2011 8:53 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

The suggestion is fine, but short-sighted. A better suggestion would be to require one or the other . I thought about that, but it seemed too open to abuse because the usernames are easily available... thus a script (or someone with too much time on their hands) could request a password reset for e...
by Albert Wiersch
Fri Oct 28, 2011 9:54 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

EXreaction wrote:Please use the bug tracker to request improvements:
http://tracker.phpbb.com/secure/CreateI ... fault.jspa

I feel like you have a valid point, requiring both does not seem to have any advantages.
Glad you agree. I've requested the improvement:
http://tracker.phpbb.com/browse/PHPBB3-10432
by Albert Wiersch
Fri Oct 28, 2011 8:51 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

stevemaury wrote:Not a support topic. Moving to Discussion.
OK. I was hoping there was an option to address this that I missed but I guess not. :cry:

Oh well, hopefully not THAT big of a deal but I do feel it should be addressed in a future update.

Over & out.
by Albert Wiersch
Fri Oct 28, 2011 8:37 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

OK, about which percentage of users do you talk forgetting both username and password? 0.1%, 0.5%? I don't know... not many, but I'm sure the vast majority don't say anything about it. Afaik all modern browsers allow to store form data, so on home PC there is normally no need to remember it by huma...
by Albert Wiersch
Fri Oct 28, 2011 8:01 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Are you serious that mail "dromedar7926@desertmail.tld" is easier to remember than user "camel"? For the user who's email address it is, then yes, it's easier for a typical user to remember their own email address than all their username(s) on all the forums and websites they are on... and if they ...
by Albert Wiersch
Fri Oct 28, 2011 7:14 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

Mixstar wrote:FWIW - If users can't remember their usernames what chance have you got of them remembering their email addresses?
A lot better chance of remembering an email address than a username.
by Albert Wiersch
Fri Oct 28, 2011 7:13 pm
Forum: phpBB Discussion
Topic: Why require username for forgotten password?
Replies: 53
Views: 6591

Re: Why require username for forgotten password?

I never heard about a user leaving a board for the reason he forgot both username and password. Normally, a board should also have a valid contact address for mail, so if someone forgets his username and password, he can contact the administrator(s). Or just create a new account ;) Sure, they could...

Go to advanced search