Forgot password before registration is finished
Forgot password before registration is finished
Tuesday 07 February 2012 10:36:26 am - 2 replies
We have a problem with our Community Project 2011.5 installation. When a user registers he gets an email with a confirmation link to click on. If he clicks not on the link, the registration process is not finished and the user profile will stay as draft in eZ. So far so good.
But the user is now already able to use the "Forgot password" function. When he clicks on the "Forgott password" link, he gets an email with a new password. This password does not work as the profile is not yet published.
Has anyone already a solution for this? For example a check, if a profile is in the draft status and then displays a message that the user registration process is not finished yet?
Thursday 08 March 2012 3:30:57 pm
Hi Yves,
From what I've learned studying the eZ kernel file (kernel/user/forgotpassword.php) that handles the forgot password operations, there is no checking on the user's account status when generating the new password. So other that hacking the eZ kernel (which is not recommended of course and I advise you not to) I don't think there is something you can do. I've checked this both on Community Project 2011.5 and Community Project 2012.2 installations.
As a personal opinion, I don't see this as a blocking problem. Maybe is does not sound right for a inactive user to already use the "Forgot password" function, but this does not badly affect the system in any way. The user can just get his password changed if he forgotten it and it's still able to activate the account using the link from the initial email following the registration. Once the activation is completed, the generated password will work.
You must be logged in to post messages in this topic!