Password reset bug

[Traci Lovelace]

Has anyone run into the password reset bug (I'm seeing it in CB and Joomla) where the system acts as if it's emailed out a reset link but it hasn't, and it locks the user out from using their old credentials?  Guess I shouldn't have tested this on the super admin account ...lol.  PHPMyAdmin is my friend...

Thanks

Traci Lovelace, who is embarrassed to even share that I did this.....

[Dorothy Firsching]

What versions of CB and Joomla have it?

Dorothy

--
You received this message because you are subscribed to the Google Groups "Joomla! User Group of Northern Virginia" group.
To post to this group, send email to novaj...@googlegroups.com.
To unsubscribe from this group, send email to novajoomla+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/novajoomla?hl=en.

Dorothy Firsching
Dorothy Firsching, PMP
Ursa Major Consulting, LLC
9536 Stevebrook Road
Fairfax, VA  22032
phone (703) 425-6236
fax (703) 345-9354
www.ursamajorconsulting.com
www.talltreesouth.com
Twitter: @dbfirsching

[Bruce Scherzinger]

Yes. Drives me nuts. Users of my sites had this problem back before Joomla 1.6 ever came out. I've resorted to resetting their passwords manually and imploring them to log in and change them ASAP.

_________________________________
Bruce Scherzinger * br...@scherzinger.org

Sent via phone. Please pardon my brevity and errors.

--

[Traci Lovelace]

YIKES.  Turns out the issue I was dealing with was much larger in scope.  The system thought it had sent out reset emails because it DID.  The site was also being exploited as an unsecure SMTP email port.  One of the tools on the host server automatically chokes email from websites when it hits a certain threshhold.  Say.... 43,000 on Christmas day.... (!!!!) Since it's automatic, the only clue was the emails not coming.

My web host helped me work it out last night.  What a learning experience.  Great reason to require SMTP authorization on outgoing emails (global server setting that I'd monkeyed with recently)

Cheers-

Traci Lovelace

--
Traci Lovelace

[Dorothy Firsching]

Traci,

You will have to brief us in person!  We all need to know this.

Cheers to you!

Dorothy

At 03:52 PM 1/6/2012, you wrote:

YIKES.  Turns out the issue I was dealing with was much larger in scope.  The system thought it had sent out reset emails because it DID.  The site was also being exploited as an unsecure SMTP email port.  One of the tools on the host server automatically chokes email from websites when it hits a certain threshhold.  Say.... 43,000 on Christmas day.... (!!!!) Since it's automatic, the only clue was the emails not coming.

My web host helped me work it out last night.  What a learning experience.  Great reason to require SMTP authorization on outgoing emails (global server setting that I'd monkeyed with recently)

Cheers-

Traci Lovelace

[Traci Lovelace]

Great!  My epic FAIL can be the subject of a meeting!  LOL.....

Seriously, I think it was host specific but I will get some details.

-Traci

--

You received this message because you are subscribed to the Google Groups "Joomla! User Group of Northern Virginia" group.
To post to this group, send email to novaj...@googlegroups.com.
To unsubscribe from this group, send email to novajoomla+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/novajoomla?hl=en.

--
Traci Lovelace

[Dorothy Firsching]

Hey, I feel the same way. I got hit last month, too, though not in the same way.

Dorothy