by SparkyRih » Tue Jun 21, 2011 1:22 pm
I see e-mail is added to the API in the new beta version, I will try to modify my script today/tomorrow...
Edit: So I started rewrting my script... but I have some issues....
For security reasons I'm using the encrypted password in the MySQL database as hash for the password reset mail... The hash has to correspond to the encrypted passowrd and userid in the DB, if so, the password can be resetted...
Issue: Subsonic's getUser API call doesn't return an encrypted password...
Using the username or e-mail addres, or even both to reset a password would be a huge security hole, even if I encrypt them...
So the only solution would be, to update the rest API, adding an encrypted password...
Edit 2: I did update the script to work with version 4.5 beta1 since the email parameter is required...
VMWare ESXi 5.5 > Ubuntu 16.04 > Subsonic 6.0 (Modded with PHP based registration feature)
