Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-10432

Don't require username when user forgets password

    Details

    • Type: Improvement
    • Status: Unverified Fix (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.0.9
    • Fix Version/s: 3.2.4-RC1
    • Component/s: None
    • Labels:
      None

      Description

      This seems to be a big usability problem - requiring the user to remember their username if they forgot their password. Why not only require an email address to send them a reset password link (which I would say is fairly standard)?

      Sure, requiring a username with an email address is more secure, but not having a forum at all is even more secure... when security gets too much in the way then it's not always a good idea.

      See:
      http://www.phpbb.com/community/viewtopic.php?f=64&t=2143041&p=13069741#p13069590

        Attachments

          Activity

            People

            • Assignee:
              Senky Senky
              Reporter:
              Albert Wiersch Albert Wiersch
            • Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: