This project is read-only.

RC : Password reset ( maybe ) broken ?

Dec 13, 2010 at 11:18 PM
Edited Dec 14, 2010 at 12:15 AM Password reset : I can not login with the password that has been emailed to me.
Can you please check ?

Note : It seems that last two characters ( If ) in the mailed password are invalid ?

cNr8FVEuIf => cNr8FVEu

Is there an option to disable password reset ?

Dec 14, 2010 at 6:17 AM

Thanks, will look at this.  And having a disable option is a good idea.

Dec 16, 2010 at 8:09 AM

I couldn't reproduce the invalid password.  The password I was sent was ylh7kZ5H, and I could log in using that password.  An HTML excerpt of the email is:

Your password at "Name of the blog" has been reset to: ylh7kZ5H<br/><br/>

.... regarding disabling password reset, that is now possible in BE  There's a new setting/checkbox on the "Basic" settings page towards the bottom to disable password resets.

Dec 16, 2010 at 8:04 PM

Somehow my old trusted news / email client Forte Agent adds if at the end of reseted password.

Anyway, I prefer to disable password reset or keep it as an admin privilege, for example one of the options in Control Panel => Users