+- Form Tools (https://forums.formtools.org)
+-- Forum: Form Tools (https://forums.formtools.org/forumdisplay.php?fid=1)
+--- Forum: General Discussion (https://forums.formtools.org/forumdisplay.php?fid=5)
+--- Thread: Bug in Forgot Password (/showthread.php?tid=1314)
Bug in Forgot Password - cd5 - May 14th, 2011
I have just installed the form tools and everything works fine however
when i create a client and then use the "Forgot Password" form to recover the password
I do not receive an email notification and the password is then no longer valid for that client.
This also happens on my Admin login and password recovery and can wipe out my Admin password also.
My email otherwise works fine with any forms that I create.
Any thoughts?
RE: Bug in Forgot Password - Ben - May 17th, 2011
Hi cd5,
Sorry for the wait!
The email functionality is very much dependent on what email options are available on your server. If it's not working as expected, the system will reset the password but fail to send the notification. No good! I agree: this is basically a bug. I'll be making two improvements in later versions of 2.1.0:
1. better error checking on the forgot password email notification so it properly confirms the email is really sent.
2. the email reset functionality won't actually reset the password in the DB, just create a note to allow the administrator to use that temporary password to log in - in addition to using their original password. This prevents random people resetting admin/client passwords when they don't want it reset. This isn't a security problem - just a usability one.
In the meantime, I'm afraid you're going to have to modify the accounts manually. To reset the admin password, give this tutorial a read:
http://docs.formtools.org/tutorials/resetting_admin_password/
All the best -
Ben
RE: Bug in Forgot Password - azism - Apr 30th, 2013
Ben,
I am having the same problem. I tried the Password Recovery routine you list here, but it doesn't work. The "Forgot Password" says it is sending a new password (or whatever it does) to my email, but I never receive it. Suggestions?
Tom
(May 17th, 2011, 2:47 AM)Ben Wrote: Hi cd5,
Sorry for the wait!
The email functionality is very much dependent on what email options are available on your server. If it's not working as expected, the system will reset the password but fail to send the notification. No good! I agree: this is basically a bug. I'll be making two improvements in later versions of 2.1.0:
1. better error checking on the forgot password email notification so it properly confirms the email is really sent.
2. the email reset functionality won't actually reset the password in the DB, just create a note to allow the administrator to use that temporary password to log in - in addition to using their original password. This prevents random people resetting admin/client passwords when they don't want it reset. This isn't a security problem - just a usability one.
In the meantime, I'm afraid you're going to have to modify the accounts manually. To reset the admin password, give this tutorial a read:
http://docs.formtools.org/tutorials/resetting_admin_password/
All the best -
Ben
RE: Bug in Forgot Password - Joe - Apr 30th, 2013
Hi Tom,
You might want to update to a different email through phpMyAdmin or any other database management tool you use. Sometimes overzealous email filters send server sent emails to the spam folder or just delete them all together.
If you are updating your password through phpMyAdmin you will need to encrypt it first here: http://docs.formtools.org/encrypt.php Some users often miss this step and just enter their passwords directly into the database.
Cheers,
Joe
RE: Bug in Forgot Password - azism - Apr 30th, 2013
Joe,
I have tried the solution as laid out in encrypt.php. I even tried entering my password (as I remember it) as the new password and gives exactly what is in my ft_accounts file. But, just to make sure, I recopy the code into the password line. No luck. Does the password need to be selected as any specific value, like MD5 or PASSWORD?
I really need to gain access to the table soon as it is dealing with a voting issue in my user group.
Tom
RE: Bug in Forgot Password - Joe - May 1st, 2013
Tom,
The passwords are double MD5 encrypted. If you used the link I sent you, that will encrypt the password. Are there any errors that are outputted when you log in? Any changes to your server lately?
Cheers,
Joe
RE: Bug in Forgot Password - azism - May 1st, 2013
Joe,
I'm not aware of any changes to the server, and the only error I get is the password is not valid. And, I do not get any email when using the forgot password option.
I suppose I can always try reinstalling Form Tool and see if something has been corrupted.
Tom
(May 1st, 2013, 8:56 AM)Joe Wrote: Tom,
The passwords are double MD5 encrypted. If you used the link I sent you, that will encrypt the password. Are there any errors that are outputted when you log in? Any changes to your server lately?
Cheers,
Joe
RE: Bug in Forgot Password - bobenfield - Jul 16th, 2013
I also do not get the email. Has this been resolved/answered? When I use Client email, it works sending it to the same email address -- it's only in the case of forgotten password that it doesn't work.
Byrne
(May 1st, 2013, 9:14 AM)azism Wrote: Joe,
I'm not aware of any changes to the server, and the only error I get is the password is not valid. And, I do not get any email when using the forgot password option.
I suppose I can always try reinstalling Form Tool and see if something has been corrupted.
Tom
(May 1st, 2013, 8:56 AM)Joe Wrote: Tom,
The passwords are double MD5 encrypted. If you used the link I sent you, that will encrypt the password. Are there any errors that are outputted when you log in? Any changes to your server lately?
Cheers,
Joe