Announcement

  •  » Requests
  •  » Send an email with connection settings on registration

#1 2010-11-09 10:27:36

plg
Piwigo Team
Nantes, France, Europe
2002-04-05
13541

Send an email with connection settings on registration

Hi Piwigo users,

A user has sent me an email because he was really annoyed. He had lost his administration password. He asked if it would be possible to send the connection settings by email.

Piwigo currently doesn't do it for 2 reasons:

1) for a long time we wanted to make emails optionnal. This is no longer true, the lost password feature sends an email but not for administrator users.

2) to avoid transmitting an administrator password by email. I think we're too paranoid. To make everybody happy, I propose to add a checkbox "send my connection settings by email", checked by default.

[Bugtracker] ticket 2021

Who has an opinion about that?

Offline

 

#2 2010-11-09 11:32:26

ddtddt
Piwigo Team
Quetigny - France
2007-07-27
7045

Re: Send an email with connection settings on registration

+1


You love Piwigo so don't hesitate to participate, learn more on the "Contribute to Piwigo" page. If you don't have much time for contribution, you can also help the project with a donation.

Offline

 

#3 2010-11-09 14:17:02

repie38
Former Piwigo Team
grenoble (FR)
2006-05-23
418

Re: Send an email with connection settings on registration

IMO it's useless, and potentially dangerous.
there are several method on the forum to reset an admin password directly in the database, an admin should have access to it.

I would prefere to make a big red warning on install to incitate admin people to save their settings, or even a "print button" or a "save file" ...

Last edited by repie38 (2010-11-09 14:20:36)

Offline

 

#4 2010-11-09 15:51:26

plg
Piwigo Team
Nantes, France, Europe
2002-04-05
13541

Re: Send an email with connection settings on registration

repie38 wrote:

IMO it's useless, and potentially dangerous.

Many other web applications do it. For a user, it is hard to understand that it would be dangerous in Piwigo but not in Dokuwiki or PunBB.

repie38 wrote:

there are several method on the forum to reset an admin password directly in the database, an admin should have access to it.

If we want to make Piwigo usable only by technical skilled users, then I would agree with you. Just like the upload form is useless because we already provide FTP upload, and plugin 1-click installation is useless because you just need to upload it in your plugin directory.

I don't want to keep Piwigo just for users enough skilled to perform an SQL query in the database. Over years, Piwigo is getting simpler to use to make it usable by more people.

repie38 wrote:

I would prefere to make a big red warning on install to incitate admin people to save their settings, or even a "print button" or a "save file" ...

A user that would prefer to not transfer this information by email would just uncheck the "send my connection settings by email" checkbox. For others, receiving an email is much simpler.

Offline

 

#5 2010-11-10 04:49:10

repie38
Former Piwigo Team
grenoble (FR)
2006-05-23
418

Re: Send an email with connection settings on registration

plg wrote:

I don't want to keep Piwigo just for users enough skilled to perform an SQL query in the database. Over years, Piwigo is getting simpler to use to make it usable by more people.

in fact, I totally agree with that.
It's just I don't like when i see a clear password on my mails.
(I always think first that my password isn't hashed, my password is my password, nobody should give it to me (ie shouldn't be clear in database)

by the way, I think piwigo is secure enough so there's no probleme on according the lost password procedure to admins

Offline

 

#6 2010-11-10 17:38:05

mvroosen
Member
Netherlands
2009-06-14
45

Re: Send an email with connection settings on registration

What about  the option for a secret question which can be send by mail to the admin.?

Last edited by mvroosen (2010-11-10 17:38:23)

Offline

 
  •  » Requests
  •  » Send an email with connection settings on registration

Board footer

Powered by FluxBB

github twitter newsletter Donate Piwigo.org © 2002-2022 · Contact