Hacker News Reader

Cool! I knew I wasn't the only one out there with this need. I wrote something similar over 10 years ago in old school PHP. I rewrote it recently enough for similar reasons as you (practice project). Mine is over at http://www.gifttracker.net/

View on HN

Very nice. What made you decide to go with the no-password option? I've never actually seen that before and it's pretty wild. Is there anything stopping someone from logging into your account?

The main reason was the sharing mechanism. When you share your list with someone, you can type in their email even if they don't have a Gift Tracker account. What will then happen is an account will be created for them with no password. When they end up following through on the share link and viewing the list, they'll be using their newly created account.

Near the top of the page, a message will appear suggesting that they lock down their account with a password.

So to answer your question, nothing but knowing the user's email address stops someone from logging into their account.

Reply on news.ycombinator.com