3 ms·
If they have to allow lookup by email I don't understand why they wouldn't throw out the input data. They should only ever have had a function to send password
by plagiarist 3y ago
If they have to allow lookup by email I don't understand why they wouldn't throw out the input data. They should only ever have had a function to send password reset that takes a user ID and uses the email on record from the database.