I just changed the demo site to use the confirmation email. You can test it
out www.bluesunrise.com/jetspeed
I created an account, and you are right, it doesn't need the password
parameter.
Added it to my buglist. Look for a commit in the next few days
-------------------------------------
David Sean Taylor
taylor@apache.org
-------------------------------------
http://jakarta.apache.org/jetspeed
-------------------------------------
> -----Original Message-----
> From: Dave Carlson [mailto:dcarlson@ontogenics.com]
> Sent: Wednesday, August 01, 2001 11:14 AM
> To: jetspeed-dev@jakarta.apache.org
> Subject: generated URL in password confirmation
>
>
> The email message produced for password confirmation
> currently includes the
> user's password in the URL string. I recommend removing it.
> If fact, the
> current implementation does not appear to need this password
> or the secretkey
> parameter in the URL. The current email contains this:
>
> You can go to the following URL to confirm your account:
>
>
> <http://192.168.1.5/jetspeed/portal/template/ConfirmRegistrati
> on/username/test
> /secretkey/ewxypgjdn1/password/test>
>
> It could be shorted to this:
>
> <http://192.168.1.5/jetspeed/portal/template/ConfirmRegistrati
> on/username/test
> >
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org
|