Forgotten your password?
#1
My private forum has members who are ultra security conscious

They have noted that when you click "Forgotten your password?" you can determine who are members if you have their e-mail by way inputting the e-mail.  If they are a member, it will return a message that a password reset has been sent; if you are not a user, it returns a message that the "email is not valid"

Is there any way to provide a standard message regardless of if the e-mail is on the system?  So a "if this email is on the system, a password reset has been sent"
Reply
#2
You could try "Languages"

I'm not sure which one but my guess would be they are in Configuration > Languages > English (American) > member.lang.php
Reply
#3
Thanks sarisisop

I can see your thinking, and that would do for a temporary job (and better than nothing); ideally, I would prefer to see both options go through the same process so there is no way to ID members via their e-mail

However, I can't find the specific text under Languages; can anyone point me to the right location (or preferably a way to achieve the latter in my above sentence)
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)