[FORUMS] Password reset functionality broken

[Twinsonian]

When attempting to reset the password on the forums the following type of URL is generated for the user:

Code: Select all

https://forum.luanti.org/app.php/app.php/user/reset_password?u

There is more in the URL of course after the u. The part that matters is that the link is generating a second app.php in the string. This results in the reset page never being found for average users.

Code: Select all

https://forum.luanti.org/app.php/user/reset_password?u

What is worse, if a user gets confused and tries to reset a couple more times they get locked out for an unspecified amount of time from trying again.

Not only that, the forums use something called Anubis which has to be one of the worst additions of security I have ever seen. Lastly, users attempting to find support for this becomes an exercise in frustration. It is not easy to find a link to any kind of support and many arent going to know how to use IRC. I attempted to use it for support and sat for hours with no response.

Anyway, that was my experience with finally getting a password reset.

[sfan5]

The password reset functionality has been fixed today.

Not only that, the forums use something called Anubis which has to be one of the worst additions of security I have ever seen.

What kind of problems have you encountered? It works fine for me.
Note that the forums taking a while to load is not Anubis fault.

[Nininik]

Report feature dosent work either