password reset not working – new password that is sent doesn't work

[jgold723]

I follow the link to the password reset page, enter my email and receive the reset password with my username.

But the new password doesn’t work when I attempt to use it to login. I enter my username, the new password (copied from the email) and click “Login”. The screen blinks, then the login form returns. There are no error messages.

[wzp]

I think you are confusing the WordPress password reset, which sends a link; with the eMember password reset (which sends a password).

Are you performing the password reset from eMember’s login form widget/page?

[jgold723]

I’m definitely using the eMember password reset function. The link I follow is the “Forgot Password?” link that appears on the bottom of the eMember login form.

That takes me to a page where I can enter my email address and click “Reset.” I’m given a response that “Your new jpassword has been emailed to you.”

Then I receive an email with my eMember username and a new password. But when I try to use that combination to login, it fails.

[jgold723]

OK, I figured it out. The account that I was trying to reset the password on was listed as “Pending” – changing it to “Active” fixed it — which makes sense.

But that brings up another question — right now the login process doesn’t offer any feedback when the login fails. It just returns to the form. Is it possible to give the user a reason why their login fails?

[wzp]

But that brings up another question — right now the login process doesn’t offer any feedback when the login fails.

The “industry practice” has been to not to give any feedback; in order to slow down hackers. Although it might be “reasonable” to have the option of displaying a “suspended,” “not yet approved,” or “activation pending” message.

[Author]

Posts