Rather than sending a password via email, as most other web systems do, we should give the user a link to a form that allows them to change their password if they click the forgot password link.
- depends on
-
PHPBB-11343 Loose string comparison during new password activation
-
- Closed
-
- is related to
-
PHPBB-14465 Remove maximum password length setting
-
- Unverified Fix
-