News for hackers. Stuff that matters.

A comment on Mistakes Beginners Make When Working with Databases. Parent comment

Re:Mistakes Beginners Make When Working with Databases by sopooneo on Wednesday June 08, 2016 @07:32PM (#11866537)
Shouldn't this risk be mitigated with authorization rules? Or do we assume we are delivering pages without any type of auth first?
[ Parent | on HN ]
Re:Mistakes Beginners Make When Working with Databases by dennisgorelik on Wednesday June 08, 2016 @09:13PM (#11866933)
You should allow to reset password to the users without authentication (and therefore without authorization).

That's the nature of password reset link.

[ Parent | on HN ]
Re:Mistakes Beginners Make When Working with Databases by sopooneo on Thursday June 09, 2016 @03:41PM (#11871775)
Oh of course. Good point.
[ Parent | on HN ]