abitdodgy/cfw-usermanager — Issue #1: Potential issues with token creation...
Author: abitdodgy
Created: 2011-12-01 17:31:56+00:00
State: open

VerifyEmails.sendVerificationEmail() and PasswordResets.sendInstructions() allow the user to create an unlimited number of tokens.

Potential solutions:

1. Set a session limit
2. Check an existing token first