You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 524 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Bug in Lost Password: mail_password function
Bug Fixeschican0 writes "This may be a hidden bug which most phpnuke site owners might not notice but I have found this to be an anoying bug.


A user who does not remember thier password can simply access the Lost Password function of the phpnuke website. By typing in the username, the script will look for, then verify the account and send off a new password to the email address which is set for that user account.

Well, here is the bug. You can input any invalid username, example "jambajulalee", then hit the Send Password button and the script will say that the password has been mailed off. Well, being that there is no such user by that username, how can the password be mailed off?


Read more and get fix here"
Posted on Sunday, January 04 @ 09:51:19 CET by Zhen-Xjell
 
Related Links
· More about Bug Fixes
· News by Zhen-Xjell


Most read story about Bug Fixes:
Downloads & Web Links vulnerability Patch

Article Rating
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


Options

 Printer Friendly Page  Printer Friendly Page

 Send to a Friend  Send to a Friend

Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Bug in Lost Password: mail_password function (Score: 1)
by Zhen-Xjell on Sunday, January 04 @ 10:12:17 CET
(User Info | Send a Message) http://castlecops.com
Nice! I've added this to the CVS.


Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.081 Seconds - 205 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::