Login via username -or- email

[Wolfie]

Admin selectable option

[] Username
[] Email
[] Either
[] Both

First two are already available..

Updating the login via email though, if there is more than one account with the same email address, which ever the email & password combination match up is the account it would use. If more than one matches both, then a screen where the member could select which user name to use.

"Either" would be where the member could use either their username -or- their email (by their choice), which would be useful if they are on multiple IPB forums but using a different name on each.

"Both" would be where both the user name AND email are required for logging in, which could be an additional form of security on a site where hacked accounts are common, because then it would require the hacker to know the email address of the victim they are trying to hack.


As for password recovery.. More of password resetting..

As with other sites that have question/answer verification... Have 2 question and answer methods - 1st would be one that cannot be changed without Admin, 2nd could be changed by the member in their controls.

Reason for the first method not being able to be changed would allow for someone to take their account back if it happened to be hijacked by someone else. If they can get the user ID and both question/answer combinations, then they can reset their password immediately. Otherwise if they can get the user name and the first question, then they can give an email address to send the password reset to. Useful also for users who no longer have the original email address.

Of course, the admin could select which options could be used as well as which are required for password recovery, and even supply a list of questions and optional pre-made answers or answer formats (example, the custom profile fields optional formatting). This could allow for the admin to make questions that are board-theme related (like on a star trek forum, their favorite character/episode; or on sports related forums, favorite sport/player; etc).

These are just a few ideas that I had floating in my head.. If anyone wants to offer something slightly different, please do.. Be nice if there was additional methods of account protection and recovery.

I know that these ideas are a bit big and would probably be put off until v3.0, but it could become a strong method of security for sites seeking and desiring as much security as possible.

:-"

[rwxr-xr-x]

Admin selectable option

[] Username

[] Email

[] Either

[] Both

First two are already available..

<{POST_SNAPBACK}>

This won't happen, as Converge will only allow one account per e-mail address, so you will not be able to tie multiple usernames to the same e-mail.

[Wolfie]

Then perhaps for situations where it already has happened (upgrades from previous versions, changed emails, etc).. It could notify the user that they need to use an alternate email address and verify it before they can continue using the account -or- that they must change the email addresses in the other account(s) first.

[jpell7]

Either and Both are the same option, aren't they? ... :ermm:

[Wolfie]

No. Either is "one or the other" but not both.

[RobertMidd]

Me want's this feature too :thumbsup:

The ability to use either that is !!!