Change Error message on lost password page

  • Resolved NumB

    (@devotee007)


    5 years, 5 months ago

    Hi!

    I would like to be forwarded from the lostpassword page to checkmail=confirm regardless if the username/e-mail exists or not. So that it’s not possible to guess if a username/e-mail exists. Is this possible? Or is there a better solution?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator bcworkz

    (@bcworkz)

    5 years, 5 months ago

    That’ll confuse users that simply mistype their email. A proper solution would be to put the user in a time out after some number of wrong attempts. Ideally, the time out grows substantially the more wrong attempts there are. See if you can find a security plugin that does this for password resets. I know there are for login attempts.

    Thread Starter NumB

    (@devotee007)

    5 years, 5 months ago

    Thanks for your answer, I will try that instead. Sounds a lot better! 🙂

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Change Error message on lost password page’ is closed to new replies.