Defect #28302

Security notification when changing password on password forgotten is empty

Added by Felix Schäfer 4 months ago. Updated 3 months ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:Jean-Philippe Lang% Done:

0%

Category:Email notifications
Target version:3.3.7
Resolution:Fixed Affected version:3.3.0

Description

Currently the "User" and "IP address" fields in security notification emails sent when changing a password using the forgotten password feature are empty.

Jan had already proposed a patch for this in the original security notification issue #21421#note-15, but it seems to have been overlooked. If this was intentionally left out, I am sorry to bother and I suggest adapting the email to not include the fields at all instead of leaving them blank.

I have updated Jans patch against master and I will attach it to this issue.

28302.patch Magnifier (4.68 KB) Felix Schäfer, 2018-03-06 22:17

Associated revisions

Revision 17269
Added by Jean-Philippe Lang 3 months ago

Security notification on password recovery is empty (#28302).

Patch by Felix Schäfer.

Revision 17270
Added by Jean-Philippe Lang 3 months ago

Merged r17269 into 3.4-stable (#28302).

Revision 17271
Added by Jean-Philippe Lang 3 months ago

Merged r17269 into 3.3-stable (#28302).

History

#1 Updated by Felix Schäfer 4 months ago

#2 Updated by Mischa The Evil 4 months ago

  • Status changed from New to Confirmed
  • Target version set to 3.3.7
  • Affected version set to 3.3.0

#3 Updated by Jean-Philippe Lang 3 months ago

  • Status changed from Confirmed to Closed
  • Assignee set to Jean-Philippe Lang
  • Resolution set to Fixed

Committed. Thanks for pointing this out.

Also available in: Atom PDF