1

I am using EE 2.6.1 and User 3.4.3

I have been having issues with the Forgot Password form.

The email being sent contains a link to reset the password

urlofmywebsite//436184488/reset_password?&id=TuIkrfhW

This link gives me a 404. Even when I remove the // Also ?& seems wrong.

If anyone could tell me what is wrong with this link it would be great.

Improve this question
5
  • Are you using Forgot Password tag of user module (solspace.com/docs/user/forgot_password).
    – Bhashkar Yadav
    Jun 27, 2013 at 7:33
  • Yes I am using the User Forgot Password tag. The form submits fine. It is the link in the email that is not working
    – user2268177
    Jun 27, 2013 at 11:00
  • I think, you should write to Solspace. Those guys are very responsive.
    – Bhashkar Yadav
    Jun 27, 2013 at 11:41
  • 1
    Not sure if you posted in the Solspace Support Forums yet, but just in case I answered below. Short version: not available yet, but we're working on it ;)
    – Solspace
    Jun 28, 2013 at 14:53
  • has anyone been able to solve this yet? I am using the current version of User (3.4.5) and the reset_passoword link is not found.
    – Peter Eastwood
    Nov 22, 2013 at 17:40

2 Answers 2

Reset to default
4

I had the same issue, and ultimately discovered it was caused by a setting in Focus Labs EE Master Config.

In config.master.php around line 258 you'll find:

/** * Member-based settings */

//$env_config['profile_trigger'] = rand(0,time()); // randomize the member profile trigger word because we'll never need it

I'm not sure why randomising the tigger would help, however I found that setting it to a constant fixed the problem e.g.

$env_config['profile_trigger'] = 'member';

Improve this answer
4
  • I think this is referring to using the native member module, not Solspace User as the question specifies, yes?
    – Jeremy Gimbel
    Oct 9, 2013 at 13:38
  • Current versions of Solspace User reference the newer EE core forgot password routine, so both User and EE forgot password forms will send URLs as described in this answer. Right now the only fix is to change from the Focus Lab random member profile trigger to something constant - assuming your are using the Focus Lab master config.
    – Chad Crowell
    Feb 14, 2014 at 21:28
  • By the way - due to a long history of spammers hitting up EE sites using the /member/register page, which is EE's default reg page for member module, I highly recommend not choosing 'member' as the trigger word. Something like member-auth or member-tools would do fine, it just has to be constant.
    – Chad Crowell
    Feb 14, 2014 at 21:31
  • I hit this issue too, with Profile:Edit. Took me awhile to finally find this thread but, yes, randomizing the trigger was the issue for me as well. And I agree with @ChadCrowell that you should still use some sort of random string as to deter spammers form being able to use the default member trigger.
    – Natetronn
    Apr 8, 2014 at 1:41
2

In EE 2.6.1, the reset password routine works differently compared to pre-2.6 version. Instead of being sent a password reset link, followed by a generated new password by email, users receive a link by email to visit a page on EE to reset their password themselves.

As of this writing, this new password reset method isn't available in User yet, but we're working on getting this added. :)

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.