markzz/aurweb.git/web/html/passreset.php, branch v1.9.0

rename .inc files to .inc.php and adjust imports and references

2011-06-22T13:15:04Z

Lukas: Add note to "UPGRADING". Signed-off-by: Lukas Fleischer

SQL: treat all UID/ID values as numbers, not strings

2011-04-27T12:50:27Z

Ensure we are not quoting these values in any of our SQL queries. Thanks-to: elij Signed-off-by: Dan McGee Signed-off-by: Lukas Fleischer

Use HTTPs for links in password reset confirmation mails.

2011-04-19T21:59:19Z

Signed-off-by: Lukas Fleischer

Modify some strings for translation.

2010-10-08T03:07:01Z

Signed-off-by: Loui Chang

Support for storing salted passwords

2010-04-17T20:50:24Z

To upgrade existing databases: ALTER TABLE Users ADD Salt CHAR(32) NOT NULL DEFAULT ''; Signed-off-by: Loui Chang

Implement 'Password Reset' facility (FS#3061)

2009-11-13T21:49:55Z

This works by adding a new field to the 'Users' table called 'ResetKey', which is a 32 characters long, random string. When the user requests a password reset, a new 'reset key' is generated and sent to the user's e-mail address in the form of a link in the following format: http://aur.archlinux.org/passreset.php?resetkey= When the above link is followed, the user is presented with a form to verify his/her e-mail address and specify the new desired password. If the e-mail address matches the reset key in the database, the new password is assigned to the account. If there is an error, a relevant message is displayed and the user is prompted to re-enter the required information. Upon successful completion of this procedure, the ResetKey field in the database is blanked and the specific key cannot be reused. One SQL query is needed to add the ResetKey field to the 'Users' table: ALTER TABLE `Users` ADD `ResetKey` CHAR(32) NOT NULL DEFAULT ''; Signed-off-by: Loui Chang