Alimama travel network can retrieve password defects of other users at will and fix them

The random field of the link for retrieving the password of the website is too simple. You can scan the link for other users to retrieve the password and modify the password of the user. Then, you can directly log on to the user account.
Retrieving random password fields is too simple

 


 

By scanning the following fields, you can change the password and log on ..

 

The password retrieval page displays the user's email address.

 

 

Solution:


Increase the intensity of Random Fields for password retrieval. Do not display the user's email address or user name on the password retrieval page.