Defect #28302
Security notification when changing password on password forgotten is empty
Status: | Closed | Start date: | ||
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | % Done: | 0% | ||
Category: | Email notifications | |||
Target version: | 3.3.7 | |||
Resolution: | Fixed | Affected version: | 3.3.0 |
Description
Currently the "User" and "IP address" fields in security notification emails sent when changing a password using the forgotten password feature are empty.
Jan had already proposed a patch for this in the original security notification issue #21421#note-15, but it seems to have been overlooked. If this was intentionally left out, I am sorry to bother and I suggest adapting the email to not include the fields at all instead of leaving them blank.
I have updated Jans patch against master and I will attach it to this issue.
Associated revisions
Security notification on password recovery is empty (#28302).
Patch by Felix Schäfer.
History
#1
Updated by Felix Schäfer over 4 years ago
- File 28302.patch
added
#2
Updated by Mischa The Evil over 4 years ago
- Status changed from New to Confirmed
- Target version set to 3.3.7
- Affected version set to 3.3.0
#3
Updated by Jean-Philippe Lang over 4 years ago
- Status changed from Confirmed to Closed
- Assignee set to Jean-Philippe Lang
- Resolution set to Fixed
Committed. Thanks for pointing this out.