hmmm.... given that email address can be used as an alternative login - wouldn't removing the email address basically enable someone to log into potentially ANY account by testing passwords or with the lost password script?
from Simple Machines Community Forum https://ift.tt/2y57Q2e
via IFTTT
No comments:
Post a Comment