Page 1 of 1

Serious problems with login procedure

Posted: May 20th, '14, 01:19
by Jennifer Murphy
After completing the registration process yesterday, I was sent an email that showed both my userid and my password in the clear. This is absolutely terrible from a security perspective. You should never send anyone's password by email. Very, very bad.

The email also said that my account was inactive awaiting approval by an administrator and that I would get another email when that happened. I never got the second email.

It doesn't look like you have all the kinks worked out.

Posted: May 20th, '14, 06:56
by bonescwa
Oh man, did the hackers figure out your password yet?

Re:

Posted: May 20th, '14, 08:40
by Poseidon
bonescwa wrote:Oh man, did the hackers figure out your password yet?
hahahahahahaha.


I agree. Why so serious? Its a forum...

Re: Serious problems with login procedure

Posted: May 20th, '14, 09:08
by JRS22
Just use a different password than you use for other sites and the information in the email won't be useful to anyone.

Re: Serious problems with login procedure

Posted: May 20th, '14, 09:34
by PaddyB
Well, sending user details over email is probably not a very good practice in general, but in case of this site I don't think it is that problematic. After all. it is a forum - we exchange thoughts, not goods or money.

With second mails from admin and that - I did't get a second email and was slightly irritated at first. I contacted Chip and it turned out that I was accepted, just didn't recieve a mail. Again, a minor annoyance if you ask me.

And welcome, Jennifer!

Re: Serious problems with login procedure

Posted: May 20th, '14, 11:03
by Chip
Unfortunately there is little we can do to change several of these problems since TeaChat runs on phpbb forum platform ... thus we have no control over the auto-send of the second email. Some people get it and some do not. I am clueless why some do not.

The email is also formatted automatically by phpbb, we do not control its contents and cannot alter it in any way. It is kind of one of those, "it is what it is" things. I hate that expression and also hate that people do not receive the auto-send email.

So, it is more like phpbb does not "have all the kinks worked out."

We do try to do the best with what we are able to control.

Have a great TeaDay,
Chip
Immoderate TeaDrinker who happens to Moderate

Re: Serious problems with login procedure

Posted: May 20th, '14, 11:10
by Chip
BTW, I am moving this to TeaChat Announcements and User Guide as this is Adagio<Feedback and intended for feedback to AdagioTeas regarding their products and services.

I will leave a shadow topic here (Adagio<Feedback) for the time being ...