Search Again:

Re: Security Issue

From: Shawn Hogan
Date: Sunday, January 12, 2003
Time: 10:38:48 am

Jeff Folk wrote:

> How did you end up with this scenario in your system? an import?
>
> I just tried to set my system up to test your scenario and am unable to
> do so. When I try to create an e-mail login for customer B that matches
> an existing login for customer A, OG barks at me saying the login is
> not unique and will not create the e-mail. When I try to create a new
> customer with a login used by another customer's additional e-mail, OG
> barks and says that it is already in use (and by who), also refusing to
> create the new customer. So, while I think that it is possible for
> someone to be so dense as to request a password to be e-mailed to them
> when they have no e-mail in your system, at least Optigold will not
> allow you to create the scenario you have described (unless there is
> some bizarre preference setting somewhere I don't want to know about
> because having duplicate logins would be a BAD thing).

I think the problem is that he has a user with the dialup login of "joe" and
then a different customer with the email "joe"...

- Shawn

----------------------------------
Shawn D. Hogan
President, Digital Point Solutions
http://www.digitalpoint.com
(858) 452-3696


---------------------------------------------------
To subscribe, unsubscribe or to search list archive
please visit http://www.optigold.com/lists/isp.html
---------------------------------------------------



Messages In This Thread:



Return to Digital Point Solutions' Home Page