Reset Password not working properly...

Permalink
I just noticed this issue. If I use the "forgot password" feature on the login page, it seems that everything works properly. I get an email with a link, etc. to change my password that looks like this:
"You may change your password at the following address:
http://www.some.site.com/login/change_password/5OgXL1cmlffs...

However, when I click that link, it redirects to the login page, and nothing is on it to let me change my password. Incidentally, the text says it's been changed and and email was sent to me. However, my old login still works just fine.

I have no idea why it's redirecting. I do have a custom login page, but the only difference is the Register for Membership area has been taken out.

Any help would be greatly appreciated on why it's not letting me change my password.

PatrickHenry
View Replies: View Best Answer
PatrickHenry replied on at Permalink Reply
PatrickHenry
Anybody got any clues here? I deactivated the login.php single_page over-ride so it used the system default, and password change still is not working.
On the default login it does the exact same thing. I enter an email, it tells me an email's been sent. I get the email, follow the link, which then redirects to the login page.
Looking at the code, I see where it the code is there that should be firing:
if($changePasswordForm){ ?>
   <p><?php echo t('Enter your new password below.') ?></p>
   <div class="ccm-form">   
   <form method="post" action="<?php echo $this->url( '/login', 'change_password', $uHash )?>"> 
      <div class="control-group">
      <label for="uPassword" class="control-label"><?php echo t('New Password')?></label>
      <div class="controls">
         <input type="password" name="uPassword" id="uPassword" class="ccm-input-text">
      </div>
      </div>
      <div class="control-group">
      <label for="uPasswordConfirm"  class="control-label"><?php echo t('Confirm Password')?></label>
      <div class="controls">
         <input type="password" name="uPasswordConfirm" id="uPasswordConfirm" class="ccm-input-text">
      </div>

But why do I not see this form when I change my password?
Someone, please help!
PatrickHenry replied on at Permalink Reply
PatrickHenry
Okay, found the issue. I'm using the ForceSSL add-on to force https on the login page. When I turn that off, everything works correctly. But I need https on the login page. Any suggestions on a workaround?
PatrickHenry replied on at Permalink Best Answer Reply
PatrickHenry
SOLVED IT!
The issue was arising from the ForceSSL add-on forcing HTTPS on the login page, which causes the change_password token to get lost.
More info here:
http://www.concrete5.org/marketplace/addons/force-ssl/support/force...

Special thanks to JBX for begin so prompt on the fix, and for making such a handy add-on (ForceSSL)!