Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-15881

Login keys are not reset after password update in some cases

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.2.4
    • Fix Version/s: 3.2.5-RC1
    • Component/s: Login
    • Labels:
      None

      Description

      In case of new password activation on password update, old login keys aren't reset, that may lead to unauthorized login (f.e. in case password was compromized and changed by someone else a user won't know that and will autologin as usually).

        Attachments

          Activity

            People

            Assignee:
            Marc Marc
            Reporter:
            rxu rxu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: