Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#749 closed Bug (fixed)

Login form changes for lost password

Reported by: vipsoft Owned by: vipsoft
Priority: low Milestone: Piwik 0.4.4
Component: Core Keywords:
Cc: Sensitive: no

Description (last modified by vipsoft)

  • error message (or redirect to Login screen) instead of a blank page when requesting a new password but user doesn't exist
  • "Remind password" is a misnomer for this button when it in fact sends a new password; change text to "Send Password Reset" and send email with link to a password reset form (see comment:5)
  • If sendmail isn't configured, it would be nice to include more validation before resetting passwords.

Change History (9)

comment:1 Changed 5 years ago by vipsoft (robocoder)

  • include IP address of requester in the email message

comment:2 Changed 5 years ago by vipsoft (robocoder)

Third bullet item fixed in #815.

comment:3 Changed 5 years ago by vipsoft (robocoder)

  • Owner set to vipsoft
  • Sensitive unset

comment:4 Changed 5 years ago by vipsoft (robocoder)

  • Milestone changed from 2- DigitalVibes to 1 - Piwik 0.4.4

comment:5 Changed 5 years ago by matt (mattab)

Also (but probably not included in this ticket) we should not reset the password by default. Instead the email should contain a link to the piwik install that would then reset the password and show it to the user on the screen (or leave him change it see #526). Reset the password by default can be misused and annoy users.

comment:6 Changed 5 years ago by koteiko

comment:7 Changed 5 years ago by vipsoft (robocoder)

  • Description modified (diff)

comment:8 Changed 5 years ago by vipsoft (robocoder)

  • Resolution set to fixed
  • Status changed from new to closed

In [1415], fixes #749 - Login form changes

  1. Lost password form now sends an email with reset instructions and link to a password change form instead of changing the password.
  2. Added password change form which requires input of a generated token (valid for 24 hrs).
  3. Fix $urlToRedirect handling; refactoring; phpdoc comments; minor reformatting

comment:9 Changed 5 years ago by vipsoft (robocoder)

In [1418], refs #749 - fix redirect after install

Note: See TracTickets for help on using tickets.