Tickets A way for staff to check HIBP email search.

[Alpha1]

We use @Xon 's password tools to lock accounts that have email / password in

Have I Been Pwned: Check if your email address has been exposed in a data breach

Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.

haveibeenpwned.com

Naturally some users will open a support ticket to resolve this, as its too technical for many users.
Is there a way to quickly query the HIBP database for the users email address? i.e. can we add a ticket field visible to staff only that shows the HIBP result OR to have a link staff can click on to see the result?
If yes, how can I create this in Tickets?

 

[Xon]

If they are logged in; that information should actually already be displayed in the top-right corner of the ticket information if they have a known compromised password, and if they have 2fa enabled.

What it doesn't do is show that information for guest users.

For my own site(s), I use the Password Tools option to add a user-group which restricts them from any sort of posting action instead of locking the account