get rid of the 24 hour expiration thing on reset passwords
Having a 24 hour expiration on reset passwords & activation IDs is the most annoying thing in the world.
My wife is a member of one of my forums and tried to reset her password and despite it being only 5 minutes she was warned that it had been more than 24 hours. Vbulletin is wonky with time. I checked the server time through SSH and it was right.
I get emails all the time from frustrated users who don't check their email daily in this regard. I don't see how it possibly adds to security to expire these things, its not like the software is used to power a bank or anything. So I'd just like to turn it off.
It should, IMO, be an option in the admin area, but it isn't, so does anyone know where I could find it in the code?
|