Open Bug 1046149 Opened 11 years ago

The "email_change_canceled_reinstated" message and the confirmation email should suggest to reset your password

Categories

(Bugzilla :: User Accounts, enhancement)

4.5.5
enhancement
Not set
normal

Tracking

()

People

(Reporter: LpSolit, Unassigned)

Details

The reasoning is in bug 1046145 comment 0: if your email address change has been confirmed and you use the "cancel token" from your old address to revert it and you are not the one who confirmed the change, then the message displayed to the user when he clicks the "cancel token" link *and* the email sent to the old account should both suggest to reset your password as the account may have been compromised. If the change hasn't been confirmed before you cancel it, then there is no need to display this warning (no need to cause panic).
You need to log in before you can comment on or make changes to this bug.