Security Bug on "Forgot your Password"

[Eremiya]

After administrator block the user in DA, user clicks on "Forgot your Password?" and after reset of the password, the new password comes on email.
After that user login in DA with new password and removes blocking from the domains. Security bug?

 

[nobaloney]

By block, do you mean a suspended site?

Jeff

 

[DirectAdmin Support]

Yup, bug, fixed for next release.

John

 

[Eremiya]

>By block, do you mean a suspended site?
Yes.

>Yup, bug, fixed for next release.
Thanks.