HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Password Reset not working

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#111437 (In Topic #22398)
TQ
Avatar

Honoured member

Hi

There seems to be an issue with the password reset mechanism.

When requesting a new password, the message is sent with the code.

Using the link, the code is accepted and the second email sent.

When the user logs in with the new password this message is presented.

Reset password
A confirmation code was not given in the URL. You may type it here manually to perform this action (along with any other required details). You will find the confirmation code in the e-mail you have received.

Attempting to insert the code again only digs them in deeper. A message along the lines of; "You've already reset your password and an email has been sent to you" is displayed.

In actual fact, the user has successfully changed their password but the message is confusing the hell out of some people and they are assuming they have not successfully reset it. Net result is that I'm getting loads of messages asking me to reset it for them.

TQ
Back to the top
 
Posted
Rating:
#111440
Avatar

I can confirm the issue, but it's actually not a new one, it goes back forever. I suppose most people probably don't have the login block on the zone the reset password runs on, although I would think that's fairly common  :ninja:.

The issue relates to the login block redirecting back where it was filled in on, unless there was a POST request. As the reset system has to use a GET request due to it being link-driven, the check doesn't apply.

This should fix it.

Attachment
sources/blocks/side_personal_stats.php
» Download: side_personal_stats.php (3 Kb, 21 downloads so far)


The block cache will need emptying.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#111443
TQ
Avatar

Honoured member

Hi Chris,

Sorry to take so long to respond, it's been one of those weeks.

Thank you for looking into this, it much appreciated by me and will make life a lot easier for a number of my less adventurous users.

You mention flushing the block cache which leads me to something else, from time to time I like/need to flush all of the caches which I do via the Upgrader. Would it be possible to have an option in Admin to do the same job?

TQ
Back to the top
 
Posted
Rating:
#111450
Avatar

Ok, for v11 we'll have a little Toggle link :).




Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#111472
TQ
Avatar

Honoured member

Sweet!

TQ
Back to the top
 
There are too many online users to list.
Control functions:

Quick reply   Contract

Your name:
Your message: