Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-17302

Password reset function does not update all necessary data

    XMLWordPrintable

Details

    Description

      This error can cause a user to have to change the password again immediately after logging in in conjunction with "Force password change". The error was noticed by our new security measures on phpBB.de, which have recently been in effect.

      Conditions for the error to occur:

      1. The "Force password change" function must be activated.
      2. For a user, the last password change must be outside the set time.
      3. The user uses the "I forgot my password" function.
      4. If the user then logs in with the new password, they will be forced to change their password again.

      The user can solve the problem themselves by entering the new password that they assigned during the reset action under "Current password" and then assigning a different password under "New password", which will then be the valid password the next time they log in.

      PR follows

      Attachments

        Activity

          People

            Marc Marc
            LukeWCS LukeWCS
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: