Mandatory password resets

RichardRichard Mildly bemusedMadrid, SpainAdministrators, Vanilla Admin Posts: 19,196 moderator

A Vanilla software update around 1 November introduced a security vulnerability that may have affected a small number of user accounts. It only could have affected members who were quoted during the first two weeks of this month, and even so, the exploit was rather arcane and unlikely. Nevertheless, as a precaution all members are being required to reset their passwords. In the worst case, your username, email, encrypted password, IP address, user preferences, and forum rank could have been exposed. Dgrin has no financial data whatsoever, and is completely separate from SmugMug accounts.

We apologize for the inconvenience. If you need additional information, you can contact me by PM.

Comments

  • muttmommamuttmomma Connecticut, USARegistered Users Posts: 1 Beginner grinner
    Hi Richard, I used to have a digital grin account, under an old email. I tried to access the forum, but I can no longer do so under my old email because the password was reset. the reset link goes to my old email so I can't get the link (the old email is no longer active). I just recently created this new dgrin account so I could get into the forum. Is there any chance the email can be updated behind the scenes on my old dgrin account? My old profile name was Punkybeth
  • RichardRichard Mildly bemused Madrid, SpainAdministrators, Vanilla Admin Posts: 19,196 moderator

    I think so. Just to be clear, you want to use the new email address you just signed up with on your Punkybeth account. Correct?

Sign In or Register to comment.