Password Reset option sending two different password

[Isje]

Hi,

If a user forgets his password, there is the option of receiving a reset link. Once this reset link is clicked on, a new automatically generated password is sent to the user. But TWO different passwords are sent out! Of which the latest is the correct one.

Any idea why this happens?

Thanks

EDIT: the version of the userforgot.php file is * @version $Revision: 14 $

[Eric Barnes]

In the latest version it sends two emails but not at once.

When they click forgot password it sends an email with a link they must follow to reset the password. Once they click that link another email is sent with the new password.

If that is not what is happening on your site then I would recommend upgrading.

[Isje]

Originally Posted by Eric Barnes

In the latest version it sends two emails but not at once.

When they click forgot password it sends an email with a link they must follow to reset the password. Once they click that link another email is sent with the new password.

If that is not what is happening on your site then I would recommend upgrading.

Hi Eric,
Indeed, it sends first a link that should be followed, but once they click on the link two emails containing two different passwords are sent out.

I just saw that my 6month free upgrade has expired. Is there something I can change somewhere to resolve this?

Thanks, Isje

[Eric Barnes]

I just tested it on my site and it worked fine. Only one email.

Open includes/classes/kernel/Mailer.php and see if it is this revision:
* @version $Revision: 308 $
* @Updated: $Date: 2009-03-31 11:40:15 -0400 (Tue, 31 Mar 2009) $

[Isje]

Hi Eric, yes this is the version I have as well.
Thanks again, Isje

Originally Posted by Eric Barnes

I just tested it on my site and it worked fine. Only one email.

Open includes/classes/kernel/Mailer.php and see if it is this revision:
* @version $Revision: 308 $
* @Updated: $Date: 2009-03-31 11:40:15 -0400 (Tue, 31 Mar 2009) $

[Isje]

Hi Eric, any more suggestions?

Thanks!

[seymourjames +]

Why not upgrade to 4.1.4 ? or reinstall your core files. I think 90% of issues I see in support are solved by re-installing because they are not issues or bugs at all (they are file transfer corruptions, missing files, bad edits, etc). If I had a dollar for every time I have had to propose that files are uploaded again I would be a wealthy man - LOL . Ty re-installing your core files.

[Isje]

Originally Posted by seymourjames

Why not upgrade to 4.1.4 ? or reinstall your core files. I think 90% of issues I see in support are solved by re-installing because they are not issues or bugs at all (they are file transfer corruptions, missing files, bad edits, etc). If I had a dollar for every time I have had to propose that files are uploaded again I would be a wealthy man - LOL . Ty re-installing your core files.

Hi Eric,
Why not upgrade? My free upgrade term has expired, and I find upgrading a bit tricky as I've made quite a few changes already...

When you say, re-install the core files, which files do you mean exactly?
Will I have to run the setup again?

And what will happen to the files I've edited already?

Sorry for the so many questions

Isje

[Isje]

The strange thing is that after I shortened the lenght of the password from 15 characters to 6 the behaviour of sending two passwords stopped. So now it sends only 1 new password. Any idea why?

I find the current way of resetting a password quite lengthy.
Is there a way to just resend the password used when registering?
This instead of sending a reset link, and then a new password?

Thanks again

[Eric Barnes]

No that is not possible because the password is encrypted in the database. The only way to send a lost password is to create a new one.

We added the validation step to keep folks from requesting a new password for someone other than themselves.