Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 23 Jan 2016, 03:59
Justinphx Justinphx is offline
 
Join Date: Jan 2012
Password Reset

If a member forgets their password they can click on reset password and entering their email address. The server then sends them an email to recover the password.

Is there a way to turn this off? My forum is secure and if a member does this they can look at the email headers and see detailed into on our server such as the real IP.

Thanks
Reply With Quote
  #2  
Old 23 Jan 2016, 04:10
Dave Dave is online now
 
Join Date: Jun 2010
Real name: Dave
Instead of sending emails locally, just use a third party email server which does not include the origin server IP in the email headers. I personally use http://www.critsend.com/.

If you really want to get rid of it, just comment out the code in the login.php file.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 20:34.

Layout Options | Width: Wide Color: