portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Sean Taylor" <da...@bluesunrise.com>
Subject RE: generated URL in password confirmation
Date Thu, 02 Aug 2001 00:49:03 GMT
I just changed the demo site to use the confirmation email. You can test it
out www.bluesunrise.com/jetspeed

I created an account, and you are right, it doesn't need the password
parameter.
Added it to my buglist. Look for a commit in the next few days

-------------------------------------
David Sean Taylor
taylor@apache.org
-------------------------------------
http://jakarta.apache.org/jetspeed
-------------------------------------




> -----Original Message-----
> From: Dave Carlson [mailto:dcarlson@ontogenics.com]
> Sent: Wednesday, August 01, 2001 11:14 AM
> To: jetspeed-dev@jakarta.apache.org
> Subject: generated URL in password confirmation
>
>
> The email message produced for password confirmation
> currently includes the
> user's password in the URL string.  I recommend removing it.
> If fact, the
> current implementation does not appear to need this password
> or the secretkey
> parameter in the URL.  The current email contains this:
>
>   You can go to the following URL to confirm your account:
>
>
> <http://192.168.1.5/jetspeed/portal/template/ConfirmRegistrati
> on/username/test
> /secretkey/ewxypgjdn1/password/test>
>
> It could be shorted to this:
>
> <http://192.168.1.5/jetspeed/portal/template/ConfirmRegistrati
> on/username/test
> >
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org
>
>



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org


Mime
View raw message