Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with password-reset
Search options answers only
not deleted
user 38360
How to let users reset their passwords in a safe manner.
107
votes
Accepted
Why should you redirect the user to a login page after a password reset?
Lets say an attacker has your password. You log in and reset it. If the reset doesn't invalidate all existing sessions, the attacker still has access, as long as they don't let their session expire.
…
- 1,585
1
vote
What if user can't answer the security question during password reset?
as Terry Chia says, security questions are, in my opinion, a waste of time.
If you don't allow a maximum number of guesses without an account lockout, you risk a brute-force attack. If you enable an …
- 1,585