[bitfolk] panel password reset / change feature

Hello, The most common support request is to reset BitFolk account password. I have therefore implemented a password reset feature to the web panel at https://panle.bitfolk.com/. It works as you would expect: - Someone follows the "reset password" link on the login screen. - They are invited to put in an account name. If the account exists and reset is enabled for that account, then an email is generated with an authorisation key in it. The email is sent to the email address on record for that account. The email also contains the IP address of the client that requested the reset, together with their browser's user agent and the time stamp. - Following the link in the email within 12 hours will randomly generate a new password. Nothing will happen if the link is not followed. When this was last discussed, there were a few people who didn't like the idea of their passwords being able to be reset by email and potentially being exposed to an attacker who already has control of their email account. Therefore I have also added the option to disable the feature. I will put the feature live on Wednesday 27th January, so if you don't like the idea of the above being possible please go to https://panel.bitfolk.com/account/security/ and disable it. In the near future I shall also add a third option for PGP encrypted emails, which should allay most people's concerns about that feature, but I am keen to get a basic version of this deployed before the weekend of 6th February as I'll be at FOSDEM and support will be emergencies only. Clearly forms to change other personal details such as email and postal addresses are also required, and also will be coming soon. On the security link above you will also find a password change form for those who prefer a web page vs. logging in to the Xen Shell and typing "passwd". As always I'm keen to hear what people's priorities are for other features to be added to the panel. I'm also open to ideas about software for managing such feature requests, as RT probably isn't best suited to it. Cheers, Andy -- http://bitfolk.com/ -- No-nonsense VPS hosting "Whoever is responsible for this stunning design failure deserves continuous cockpunches." -- jwz