limitphp Posted January 23, 2009 Share Posted January 23, 2009 I'm creating a simple music site. The myaccount.php, as of right now, will just allow users to update their passwords and security questions/answers. Should I have require them to put in their current passwords and security answers to update their passwords/security questions/answers, or just let them update it without putting in their current passwords/security answers? Quote Link to comment https://forums.phpfreaks.com/topic/142130-solved-seeking-advice-on-myaccountphp-logic-design/ Share on other sites More sharing options...
premiso Posted January 23, 2009 Share Posted January 23, 2009 I make them enter their current password, incase they did a cookie hack to get in the site. Quote Link to comment https://forums.phpfreaks.com/topic/142130-solved-seeking-advice-on-myaccountphp-logic-design/#findComment-744421 Share on other sites More sharing options...
aebstract Posted January 23, 2009 Share Posted January 23, 2009 I would probably also have a validation link sent to the email on the account. Be a personal preference though. Quote Link to comment https://forums.phpfreaks.com/topic/142130-solved-seeking-advice-on-myaccountphp-logic-design/#findComment-744431 Share on other sites More sharing options...
revraz Posted January 23, 2009 Share Posted January 23, 2009 I would think as a minimum you would want them to enter their old PW. Quote Link to comment https://forums.phpfreaks.com/topic/142130-solved-seeking-advice-on-myaccountphp-logic-design/#findComment-744434 Share on other sites More sharing options...
limitphp Posted January 23, 2009 Author Share Posted January 23, 2009 thanks guys.... I'll make them input their current password to change stuff, and then I'll send them an email letting them know about the changes. Quote Link to comment https://forums.phpfreaks.com/topic/142130-solved-seeking-advice-on-myaccountphp-logic-design/#findComment-744462 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.