[ABD] Username Or Email Password Reset

Any abandoned Extensions will be moved to this forum.

WARNING: Extensions in this forum are not currently being supported or maintained by the original Extension author. Proceed at your own risk.
Forum rules
IMPORTANT: Extension Development Forum rules

WARNING: Extensions in this forum are not currently being supported nor updated by the original Extension author. Proceed at your own risk.
Locked
User avatar
martti
Registered User
Posts: 739
Joined: Thu Jul 31, 2014 8:23 am
Location: Belgium

[ABD] Username Or Email Password Reset

Post by martti » Fri Jun 08, 2018 9:16 am

In response to this request:

Extension Name: Username Or Email Password Reset
Author: martti
Extension Description:
By default in a phpBB board you need to provide both username and email to reset your password. With this extension you only need one of them.

Only users with a unique email address in the database can use the email addres to request a new password. It is recommanded to check beforehand if all email addresses are unique. When you left the configuration option "Allow email address re-use" in the ACP (General > Board configuration > User registration settings) to the default "false" in your board, this will be the case.
Extension Version: 0.1.0
Requirements: PhpBB 3.2+ PHP 7+
Extension Download: https://github.com/marttiphpbb/phpbb-ex ... master.zip The files are to be put in ext/marttiphpbb/usernameoremailpasswordreset
Github repository: https://github.com/marttiphpbb/phpbb-ex ... swordreset
Languages: en
Templates: prosilver
Screenshot:

Image

Related extensions:
Last edited by martti on Thu Apr 25, 2019 4:22 pm, edited 1 time in total.

User avatar
Brf
Support Team Member
Support Team Member
Posts: 51701
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: [3.2][BETA] Username Or Email Password Reset

Post by Brf » Fri Jun 08, 2018 12:02 pm

So.... an anonymous guest can visit your board and request a password change for your admin accounts without having to know the associated email address?

User avatar
null2
Registered User
Posts: 464
Joined: Wed Jan 20, 2010 11:03 am

Re: [3.2][BETA] Username Or Email Password Reset

Post by null2 » Fri Jun 08, 2018 1:39 pm

Yes, but new password wont be activated because admin should confirm that using a link sent thru email.
Sorry for my bad english. I'm from USA.

User avatar
Brf
Support Team Member
Support Team Member
Posts: 51701
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: [3.2][BETA] Username Or Email Password Reset

Post by Brf » Fri Jun 08, 2018 1:40 pm

True, but the anonymous user can cause an admin's email box to be flooded with these password change emails.

User avatar
Ger
Recognised Extension Developer
Posts: 1845
Joined: Wed Jan 02, 2008 7:35 pm
Location: 192.168.1.100
Contact:

Re: [3.2][BETA] Username Or Email Password Reset

Post by Ger » Fri Jun 08, 2018 1:50 pm

Or anyone elses mailbox for that matter. Say I have some personal grudge against another user, I just start requesting password changes with his username to annoy him.
My extensions:
Simple CMS, Feed post bot, Avatar Resize, Modbreak, Magic OGP, Live topic update, Modern Quote, Quoted Where (GDPR) and Autoresponder.
Newest: FAQ manager for 3.2

Like my work? Buy me a coffee to keep it coming. :ugeek:
-Available for custom work-

User avatar
Brf
Support Team Member
Support Team Member
Posts: 51701
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: [3.2][BETA] Username Or Email Password Reset

Post by Brf » Fri Jun 08, 2018 1:54 pm

Indeed. That was my point. It is too easy to abuse.

User avatar
martti
Registered User
Posts: 739
Joined: Thu Jul 31, 2014 8:23 am
Location: Belgium

Re: [3.2][BETA] Username Or Email Password Reset

Post by martti » Fri Jun 08, 2018 2:23 pm

Brf wrote:
Fri Jun 08, 2018 1:54 pm
Indeed. That was my point. It is too easy to abuse.
Yes, that was my first thought too. But then it depends if it will actually happen. And when it happens, it is easy to disable the extension again. (And possibly switch to Email Only Password Reset)

User avatar
null2
Registered User
Posts: 464
Joined: Wed Jan 20, 2010 11:03 am

Re: [3.2][BETA] Username Or Email Password Reset

Post by null2 » Sun Jun 10, 2018 2:17 am

Very good extension, thanks for sharing it. Installed and working fine.
Sorry for my bad english. I'm from USA.

Holger
Registered User
Posts: 1726
Joined: Tue Mar 12, 2002 3:54 pm
Location: Hannover

Re: [3.2][BETA] Username Or Email Password Reset

Post by Holger » Tue Mar 12, 2019 2:44 pm

Would it be difficult to implement anti-flooding? X tries in 24 hours or so?

User avatar
martti
Registered User
Posts: 739
Joined: Thu Jul 31, 2014 8:23 am
Location: Belgium

Re: [3.2][BETA] Username Or Email Password Reset

Post by martti » Thu Apr 25, 2019 4:21 pm

As from phpBB 3.2.5 only the email address field is still there, this extension no longer works. This extension is going to be discontinued.

Locked

Return to “Abandoned Extensions”