-
Bug
-
Resolution: Fixed
-
Major
-
3.3.11
-
None
This error can cause a user to have to change the password again immediately after logging in in conjunction with "Force password change". The error was noticed by our new security measures on phpBB.de, which have recently been in effect.
Conditions for the error to occur:
- The "Force password change" function must be activated.
- For a user, the last password change must be outside the set time.
- The user uses the "I forgot my password" function.
- If the user then logs in with the new password, they will be forced to change their password again.
The user can solve the problem themselves by entering the new password that they assigned during the reset action under "Current password" and then assigning a different password under "New password", which will then be the valid password the next time they log in.
PR follows