adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-11-03 07:22:22 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

[security] Resetting password should deactivate current user sessions #260

New Issue
Open
opened 2026-10-04 23:49:27 +02:00 by adam · 0 comments
adam commented 2026-10-04 23:49:27 +02:00
Owner
Copy link
Copy source

Reported by effigies on 16 Jun 2014 17:13

Just a suggestion, but for your consideration:

If a user changes their password but has another session open (e.g. in another browser or on another machine), they will not be surprised to find the session ended.

If a user changes their password but an attacker has a session open, presumably the user would want the attacker's access restricted.

Finally, if an attacker changes their password but the user has a session open, the user would likely want to be alerted to being locked out of their account.

Piwigo Bugtracker #3092

**Reported by effigies on 16 Jun 2014 17:13** Just a suggestion, but for your consideration: If a user changes their password but has another session open (e.g. in another browser or on another machine), they will not be surprised to find the session ended. If a user changes their password but an attacker has a session open, presumably the user would want the attacker&#039;s access restricted. Finally, if an attacker changes their password but the user has a session open, the user would likely want to be alerted to being locked out of their account. [Piwigo Bugtracker #3092](http://piwigo.org/bugs/view.php?id=3092) <!-- github-sync-id:97226801 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#260