From e943812dc9802d134f2d9627a6c4fc94fe9c26f9 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Fri, 30 May 2008 17:35:34 -0400 Subject: hashed password support, and empty password security fix This implements the previously documented hashed password support. While implementing that, I noticed a security hole, which this commit also fixes.. --- templates/passwordmail.tmpl | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) (limited to 'templates') diff --git a/templates/passwordmail.tmpl b/templates/passwordmail.tmpl index 8484d39b2..df86be109 100644 --- a/templates/passwordmail.tmpl +++ b/templates/passwordmail.tmpl @@ -1,10 +1,15 @@ -Someone[1], possibly you, requested that you be emailed the password for user - on [2]. +Someone[1], possibly you, requested that the password for + on [2] be reset. -The password is: +To change your password, visit the following url, and enter a new password: + + + +This url can only be used once to change your password, and it will also +stop working the next time you successfully log in. -- ikiwiki -[1] The user requesting the password was at IP address +[1] The IP address was [2] Located at -- cgit v1.2.3