Thread: [Fixed] Reset password instructions are not sent to unvalidated e-mail addresses
View Single Post
  #1 (permalink)  
Old 07-02-2008, 10:09 PM
eric eric is offline
Founder
  
Join Date: Oct 2007
Location: San Francisco
Posts: 234
eric has disabled reputation
Default Reset password instructions are not sent to unvalidated e-mail addresses
The forgot password logic checks for a validated e-mail address and only sends the reset e-mail link to accounts with validated e-mail addresses.

It is possible for a user to "forget" their password before their e-mail address is validated, making them unable to reset their password.
Reply With Quote