2013-02-01, 04:00 AM
Hi all,
playcentreforums.co.nz/forum (nothing to see there unless you are logged in)
Please read the whole post before jumping to conclusions - thanks!
I know, my board is not the current version, and I will fix that in the next few days.
Old version or not, I need to find out now what is happening in any case. If this is a known bug of the older version, just tell me, I'll have my answer, and the update should fix it.
The reason I would like an answer to this as soon as possible is that something smells a little bit fishy here to me, and I'd like to know if it has been hacked or otherwise compromised. If it is a bug, it's a pretty serious one, because the users who experience this have no way to get back into the forums.
This could just as well be user error or error on my part somehow; I don't mind if someone tells me that, as long as I find an answer and a way to fix it.
WHAT IS HAPPENING:
When a user clicks on "Forgotten your password?", they receive TWO password reset emails. In some cases, the text of these emails is identical; in other cases, the text is different between the two emails.
EXAMPLE 1 - this I assume is how the emails should be:
Email 1:
User1,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=GJsBOkYf
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: (removed)
Thank you,
The Playcentreforums Staff
Email 2 (obviously after the user clicked on the link in the first email):
User1,
Your password at The Playcentreforums has been reset.
Your new password is: (removed)
You will need this password to login to the forums, once you login you should change it by going to your User Control Panel.
Thank you,
The Playcentreforums Staff
EXAMPLE 2 - this makes no sense to me at all:
Email 1:
User2,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=aeKQqe3O
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: aeKQqe3O
Thank you,
The Playcentreforums Staff
Email 2:
User2,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=4T8bN9bb
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: 4T8bN9bb
Thank you,
The Playcentreforums Staff
In some of these cases the new login works, in others supposedly it doesn't.
Also, why would the forum send out two identical reset emails (albeit with different reset links) in the first place? I tried it, when it happens, it happens with only ONE click on "forgotten password".
Btw, this has nothing to do with multiple accounts under the same email address; this is not allowed on my forums, doesn't exist.
So can anyone explain what is happening here, or what I or the user are overlooking or doing wrong? I would be really grateful for advice.
Cheers,
Matt
playcentreforums.co.nz/forum (nothing to see there unless you are logged in)
Please read the whole post before jumping to conclusions - thanks!
I know, my board is not the current version, and I will fix that in the next few days.
Old version or not, I need to find out now what is happening in any case. If this is a known bug of the older version, just tell me, I'll have my answer, and the update should fix it.
The reason I would like an answer to this as soon as possible is that something smells a little bit fishy here to me, and I'd like to know if it has been hacked or otherwise compromised. If it is a bug, it's a pretty serious one, because the users who experience this have no way to get back into the forums.
This could just as well be user error or error on my part somehow; I don't mind if someone tells me that, as long as I find an answer and a way to fix it.
WHAT IS HAPPENING:
When a user clicks on "Forgotten your password?", they receive TWO password reset emails. In some cases, the text of these emails is identical; in other cases, the text is different between the two emails.
EXAMPLE 1 - this I assume is how the emails should be:
Email 1:
User1,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=GJsBOkYf
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: (removed)
Thank you,
The Playcentreforums Staff
Email 2 (obviously after the user clicked on the link in the first email):
User1,
Your password at The Playcentreforums has been reset.
Your new password is: (removed)
You will need this password to login to the forums, once you login you should change it by going to your User Control Panel.
Thank you,
The Playcentreforums Staff
EXAMPLE 2 - this makes no sense to me at all:
Email 1:
User2,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=aeKQqe3O
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: aeKQqe3O
Thank you,
The Playcentreforums Staff
Email 2:
User2,
To complete the phase of resetting your account password at The Playcentreforums, you will need to go to the URL below in your web browser.
http://playcentreforums.co.nz/forum/memb...e=4T8bN9bb
If the above link does not work correctly, go to
http://playcentreforums.co.nz/forum/memb...etpassword
You will need to enter the following:
Username: (removed) (Or your email address)
Activation Code: 4T8bN9bb
Thank you,
The Playcentreforums Staff
In some of these cases the new login works, in others supposedly it doesn't.
Also, why would the forum send out two identical reset emails (albeit with different reset links) in the first place? I tried it, when it happens, it happens with only ONE click on "forgotten password".
Btw, this has nothing to do with multiple accounts under the same email address; this is not allowed on my forums, doesn't exist.
So can anyone explain what is happening here, or what I or the user are overlooking or doing wrong? I would be really grateful for advice.
Cheers,
Matt