Password reset links

Post any known bugs here!

Password reset links

Postby Amiiii » Mon Jan 06, 2020 4:30 pm

Hello,

i wanted to report the following:

Password reset links stay valid after use, for days.
Since town of salem has a history of well, handling data not very safely (looking back at the data breach), I thought of reporting the issue before this becomes an actual known thing.
Password reset links should never stay valid after use or a longer period of time.
Please fix the issue, before it gets abused.
Amiiii
Amnesiac
Amnesiac
 
Posts: 7
Joined: Fri Jul 07, 2017 6:22 pm

Re: Password reset links

Postby Jerme » Mon Jan 06, 2020 11:23 pm

Thats an interesting report.
So your link stayed valid and did not expire even after use?
Disclaimer: I try to abide by the game's softfilter and use the appropriate replacements, when I am using the forums. Those will be set in brackets. Example: [tarnation]
Visit my role suggestions and give me feedback: http://www.blankmediagames.com/phpbb/viewtopic.php?f=27&t=28949

Visit the Testing Grounds
Occupation: A developers pain and joy (QA-fox), currently "hired" by Ralozey
User avatar
Jerme
Global Moderator
Global Moderator
 
Posts: 28197
Joined: Thu Apr 30, 2015 2:09 pm

Re: Password reset links

Postby Amiiii » Wed Jan 15, 2020 3:45 pm

Yup.

It happens with pretty much _all_ links, not only for me either.

(Also sorry for the late reply, i was on vacation :P)
Amiiii
Amnesiac
Amnesiac
 
Posts: 7
Joined: Fri Jul 07, 2017 6:22 pm

Re: Password reset links

Postby Jerme » Wed Jan 15, 2020 11:08 pm

I did raise the point to the devs, not sure what they will do for that, though.
Disclaimer: I try to abide by the game's softfilter and use the appropriate replacements, when I am using the forums. Those will be set in brackets. Example: [tarnation]
Visit my role suggestions and give me feedback: http://www.blankmediagames.com/phpbb/viewtopic.php?f=27&t=28949

Visit the Testing Grounds
Occupation: A developers pain and joy (QA-fox), currently "hired" by Ralozey
User avatar
Jerme
Global Moderator
Global Moderator
 
Posts: 28197
Joined: Thu Apr 30, 2015 2:09 pm

Re: Password reset links

Postby Amiiii » Thu Jan 16, 2020 5:18 pm

Awesome, thanks a lot.
Amiiii
Amnesiac
Amnesiac
 
Posts: 7
Joined: Fri Jul 07, 2017 6:22 pm


Return to Bug Reports

Who is online

Users browsing this forum: No registered users and 6 guests