Forgot_password abuse

Let’s make sure the site is updated, latest should reduce the volume, we will soon add up address to the email so site admins can easily block abusers

5개의 좋아요

Please do. I have situation where most users get reset links several times a week.

1개의 좋아요

A potential solution if a community is likely to get abuse and users are likely to know what their email address is, would be to require an email address rather than username to request a password reset.

2개의 좋아요

hmmm @puchal did you enable hide email address taken site setting? It will require a full email for a forgot password email to be issued.

3개의 좋아요