reset password

Hi there,
I am wanting to create a password reset system after upgrading to hash encryption. The forgot password page sends the reset link email just fine, but returns
"no record found' from the reset page.

I couldn't find any information on how to create the reset page so no doubt that's where I've gone wrong? It appears from posts I've read that the wizard is maybe supposed to include this on the forgot password page, but it hasn't done so for me.

Appreciate any help you can give - files attached.

Thank you.

The forgot password page has the "Email Forgot Password" server behavior and not the "Email Encrypted Forgot Password" server behavior.

I'd run the wizard again. It looks like the page was generated for non-encrypted password fields.

Hi Ray,

Thanks for your reply, and apologies - I sent the wrong forgot password page.

I've privately attached the correct one.

That page looks correct. Can I get a url and ftp access to look into it further? I'll have to look at the reset_password.php and possibly debug it.

If you could send me the email link that gets sent that would help as well.

Originally Said By: Ray Borduin

  That page looks correct. Can I get a url and ftp access to look into it further? I'll have to look at the reset_password.php and possibly debug it.

If you could send me the email link that gets sent that would help as well.  

See pm

I found three problems.

1) on the forgotpassword page you had the password column set to MemberID instead of password
2) on the reset_password page the userID variable used to filer the recordset and set the update was set to a session variable that wasn't set instead of the url parameter passed to the reset page.
3) The update server behavior on the reset page wasn't actually encrypting the password before updating the record

After fixing those three issues the page seems to be working properly.

Thank you Ray, you're a star. Much appreciated.