Hi All



We recently got a complaint, and we did verify it! :



If the Options >> users >> User Settings >> default password settings is set to "Hashed" password:



If and when the user will be requesting a password reset through the forgot password page (under the Sign in control) they will get back the password in the email encrypted!



Any Take on this??!?







Here is a sample:



***************************

***************************



<SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Arial','sans-serif'; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">Your password has been reset.<SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Times New Roman','serif'; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">

<SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Arial','sans-serif'; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">Username: <SPAN style="FONT-FAMILY: 'Arial','sans-serif'">test1234
Password: <SPAN style="FONT-FAMILY: 'Arial','sans-serif'">/O9JWg+covS9tTlqKh4FHw== <BR style="mso-special-character: line-break"><BR style="mso-special-character: line-break">



***************************

***************************





and self understood, this password will not work, as it is the hashed password not the actual password !?!?!?!?!






Thanks all IA



Leo

Thanks



I did only get it in BVC 5.4, so I dont know where to post it!