svip/ToyGallery — Issue #20: Allow users to finish registration without the use of a link
Author: svip
Created: 2011-12-20 14:14:29+00:00
State: open
Labels: Enhancement, Security

Sending links in e-mails can make the site vulnerable to phishing attacks. A recommended version would be to ask the user to type in the token given into a form that will appear on the site, waiting for confirmation.

A similar action should be taken for *changing* e-mails.