-
Jared Hancock authored
Uses a seven step procedure: 1. (user) Fails to login twice or more 2. Clicks the 'Forgot my password' link on the login form 3. Submits the username or email address and triggers a password-reset email 4. Clicks the link in the email and is directed back to the reset page 5. Enters the username or email again and is logged in 6. Password change is forced, but current password is not required 7. Password is updated, user can continue the session without authenticating again5cac196a
pwreset.sent.php 761 B
<?php
include_once(INCLUDE_DIR.'staff/login.header.php');
defined('OSTSCPINC') or die('Invalid path');
$info = ($_POST && $errors)?Format::htmlchars($_POST):array();
?>
<div id="loginBox">
<h1 id="logo"><a href="index.php">osTicket Staff Password Reset</a></h1>
<h3>A confirmation email has been sent</h3>
<h3 style="color:black;"><em>
A password reset email was sent to the email on file for your account.
Follow the link in the email to reset your password.
</em></h3>
<form action="index.php" method="get">
<input class="submit" type="submit" name="submit" value="Login"/>
</form>
</div>
<div id="copyRights">Copyright © <a href='http://www.osticket.com' target="_blank">osTicket.com</a></div>
</body>
</html>