#6218 - Forgot password would re-send an expired code if it existed

  • By
  • Added
  • 12 views
Identifier #6218
Issue type Minor issue (breaks specific functionality)
Title Forgot password would re-send an expired code if it existed
Status Completed
Tags

Roadmap: v11 (custom)

Handling member PDStig
Version 11 beta7
Addon core_cns
Description When using the forgot password feature, if a member already used the feature and had a code stored, the same code would be sent again even if it was already expired.

Additionally, checks for an expired code when submitting a code would assume password_reset_minutes was actually hours, not minutes, leading to reset codes lasting 60X longer than they should.

Both issues have been fixed in this hotfix.
Steps to reproduce

Funded? No
Commits

Fixed MANTIS-6218 (Forgot password would re-send an expired code if it existed) (daa9da1f) · Commits · Composr ecosystem / Composr · GitLab

The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated