If you like it,
send a buck
Not logged in. · Home · Shoutbox · Forums · Albums · Browse · Help · More... · Log In


admu_sss

Posted 2 years ago (07/03/08 9:28am)

"password recovery through username instead of just through email"
comments?


dudewtf

Posted 2 years ago (07/26/08 11:58am)

asdas

This post was edited on July 26, 2008, 11:58 am


Falcon4
File Moderator
teh Fighting Falcon

Posted 2 years ago (07/26/08 6:22pm)

dsfargeg


Falcon4
File Moderator
teh Fighting Falcon

Posted 2 years ago (07/27/08 11:31pm)

Okay, so here are some possible solutions, and their problems:

Solution 1:
Just allow lost password recovery based on username (as well as email). It'd act the same as using the email address.
Problem:
How does a user know what email address the confirmation is sent to?

Solution 2:
Allow lost password recovery based on username (as well as email), and show the user the email address the confirmation was sent to.
Problem:
Full email addresses would then be available to the general public just by punching a username into the tool.

Solution 3:
Allow lost password recovery, etc., like #2, but only show the email domain (i.e. @yahoo.com), not the full address.
Problem:
How will the user know what account to check?

Solution 4:
???

Any ideas?
Page: [1] You could add a comment if you were logged in or registered!
Hostfile.org 3.0 single-handedly coded, written from line 1, and ? 2005-2008 Matt Falcon / falcon@falconfour.com
Hack != Crack PHP powered MySQL powered Get Firefox! No-WWW Class B
Page generated from the Dreamhost Uberbox in 0.03394 seconds