[JDEV] new password

Greg Wong greg.wong at plumtree.com
Fri Mar 2 14:45:45 CST 2001


To change password:

<iq type="set" id="blahblah" to="##your_jabber_server"><query
xmlns="jabber:iq:register"><username>##your_user_name</username><password>##
new_password</password></query></iq>

Note: there is no check on the old password here.
It would be good practice to make that check on the client side so as not to
be able to hack into another person's account.

Is there a was (server code change) to add in an <oldpassword> field as a
security measure?

greg




More information about the JDev mailing list