Hi,

I have a client with hundreds of members in his Concrete5 website. Most of these clients only log in once a year or so. It seems many of them tend to forget their password and have to use the password reset feature.

The problem is that many of his members are unable to receive the forgot password email. I can check the mail logs to ensure they were sent, but for whatever spam/firewall related reasons some people are simply unable to receive the email - and therefore cannot log in.

He says it's so common that he would rather set ALL of his members to have the exact same password so that they can then log in and change their password that way. This is obviously a bad idea from a security standpoint, but I don't have any other solutions to offer him.

Can anyone suggest a better solution or let me know how they would go about this?

Thanks in advance!