Strange & quot; password retrieval & quot; email problem, password retrieval email Problem

Strange "password retrieval" email problem, password retrieval email Problem

In most systems, the "retrieve password" function is available. Our platform also provides this function. You can retrieve the password through text messages and emails.

Specifically, the method for retrieving the email password encountered a strange problem. record it and check who has encountered the problem and solve it together.

[Symptom]

When you click "forgot password" on the interface, you need to enter your login username. The system will send a linked email according to the previously reserved email address. You can click the link to change the password, and the address is valid once. There is no problem in testing the environment (public network cannot be connected), but after the above is in the formal environment (internal and external Unicom, when some users click the received link, "the password retrieval link is invalid!" is displayed! ".

The user is very certain that he has never clicked this link again, but the first click of the link is invalid? Strange problem.

Email notification received by the user

 

When a link is used once and then clicked again (this happens when some users do not click)

 

[Reproduction]

Re-register a user test-xjd in the environment to send an email. Normally, sina mail does not have this problem, and 163 and qq mail both have the same problem.

Check the access records of the front-end server and find that the email will be accessed in about half a minute after it is sent. As a result, the link becomes invalid when real users access the email.

 

WHY? Tell me why?

[Solution]

1. Use a front-end server to disable this type of access. The filtering condition is Mozilla/4.0.

2. Modify the link to a short link. At the same time, the Link contains many sensitive information leaks. It must be processed as a whole.

 

[Follow-up]

Based on the access log, the list of IP addresses to be accessed is extracted as follows. If you know who is using these IP addresses or which unit, please let us know.

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748

101.226.102.97101.226.33.200101.226.33.202101.226.33.220101.226.33.223101.226.33.227101.226.33.228101.226.33.238101.226.51.226101.226.51.228101.226.65.104101.226.66.173101.226.66.180101.226.66.187101.226.66.192101.226.89.116101.226.89.119101.226.89.123101.226.89.64101.226.89.69112.64.235.247112.64.235.253112.64.235.254112.64.235.86112.64.235.91180.153.114.199180.153.114.200180.153.163.187180.153.163.209180.153.201.212180.153.201.66180.153.205.253180.153.205.254180.153.206.16180.153.206.17180.153.206.21180.153.206.23180.153.206.31180.153.206.38180.153.214.178180.153.214.180180.153.214.181180.153.214.182180.153.214.188180.153.214.190180.153.214.191222.73.77.54222.73.77.55

　　

Discuz! Password retrieval problems

This problem is troublesome. It is estimated that the email sending on the forum is blocked and the mailbox cannot be recovered.
Try registering an account again, contact the administrator, or post a post to reflect the problem. I believe the Administrator will help you retrieve the password.
 
After World of Warcraft forgets the password, a confirmation email has been sent to your registered email address. Click the link in the email to retrieve the password.

~~~~ How many registered mailboxes do you have? If you do not call our Customer Service staff again, they may check your ID card and say that you are listening to your registered account email ~~~