TetraBB.com Home of Tetra-WebBBS and TetraBB PRO

: Oh OK, I had this enabled, but was afraid some of the bad guys
: would be resetting other peoples passwords if those people
: inadvertently click the verification link in the email.. I guess
: I could set it for 1 hr time out, so that person would be at the
: computer when they are resetting it and if someone else did odds
: are it would time out.. thanks again

The plugin is a bit smarter

Uses a unique identifyer for the verification link sent by email, so one would have to guess the identifyer (or brute force it)

And... to change the email the one requesting the change MUST provide the profile password. ... to change the password, the new password must be verified as well via a verification email sent to the address in the profile.

So either password or email is required to change the value of the other item. One can't change both at the same time.

... and of course a new password will only be activated if the verification link sent to the email owner is clicked, otherwise the old password will stay active.

Check it out yourself and play a bit to understand it yourself and to be able to help your users in case of questions.

Enjoy!
Rainer