change password shouldn't log you into your account, just provide a form to ente... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Deadsunrise on June 14, 2011 | parent | context | favorite | on: If you develop web apps, don't do this.

change password shouldn't log you into your account, just provide a form to enter a new password.

sneak on June 14, 2011 [–]

Yes, it should.

I can just set a new password and then log in with it anyway. Don't make your users jump through hoops.

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact