Forgot password: none of the show if messages appear

Dear Jason, None of the 'show if' confirmation validation messages ('Invalid information, please check your entries and try again' or 'Your email address could not be found in our records. Please try again' etc) appear if I send an email address.

Attached is zipped file.

I also want to clear all password encrytion for testing purposes, but the following message pops-up when I try and change the encrytion to none on the bottom of the selection pane - see attached pdf.

Those errors use Security Assist Show If rules.

how are the Security Assist rules defined that control those errors?


here are updated copies of the 2 files from the shared/webassist/securityassist/xml folder that should correct the problem. If you need help finding the configuration folder, see the common installation issues page:
common_installation_issues.php

Make sure to also delete the .dat file after replacing the 2 attached files.

Okay, thanks, I'll give it a go.

Sorry Jason, I forgot to answer your question. I ran the Security Assist wizard, and just incorporated the login page and the forgotpassword page into my site. I didn't create the 'show if's' myself. I'll update the files and run the wizard again and I'll let you know how I get on.

Jason, I've just managed to get around to dealing with the forgotten password issue.

Background: When user register, the pasword has no encryption.

Problem 1
I've copied/replaced the old the xml file with the new xml file that you sent me. I delete the cache. However after doing that, the same issues still exists - no 'show if messages' appear when you enter the email address and press submit. The progress wheel appears for a moment, but there's no message informing you that an email has been sent.

Problem 2
In a senario where I change the last field 'Password Encryption' in the server behaviour called 'SecurityAssist Email Encrypted Password' from MD5 to none (see pdf called 'forgot Password pop_up' - then in this senario, the progress wheel fails to appear and no email is sent - any reason? What exactly is this process doing of setting that to MD5 or none?

make sure you are using the new Data Bridge 1.1.0 update that was recently released.

Okay, I need to upgrade from 1.0.9.

I've upgraded to 1.1.0. But I am still having problems.

Background:
On registration the user enters a username and password - none of which are encrypted.

Problem:
The user forgets their password. They enter their email address and an email is sent - but only if the server behaviour called 'SecurityAssist Email Encrypted Password' is set to MD5 under the database tab. If it is set to none, I get the message - 'Email failed to send. Please confirm your email settings with your hosting provider.' So why is this. I've read the help details but they aren't making things any clearer.

Also, when and if the user resets their password, it enters an encrypted password. This must be something to do with the way 'SecurityAssist Email Encrypted Password Return' is setup. Here, 'username' and 'password' encryption are set to 'none' - see attached pdf.

are you running the wizard? or creating the forgot password page manually?

if you are not using password encryption, you should not be using the 'SecurityAssist Email Encrypted Password' behavior on your page.


if the password is not encrypted, use the Email Password behavior. the Email Password behavior is for use with un encrypted passwords.

Dear Jason, the login details and forgot password were prepared with the wizard. I've now set all the password details back to MD5 (which I'm told is not secure) and everything seems to be in order.

Question 1
When would you set or in what situation would you set the 'email to encryption' - its the last line on the SecurityAssist Email Encrypted Password Return server behaviour - see attached pdf.

Question 2
Can you sent a user his password, if it has been encrypted - can you un-encrypt it in an email, instead of having to reset? It may not be good practice, but just wondering?