Forgot Manager Password Plugin

It’s geting late so I’m going to make this quick. But I thougth I should get something out there as I know people are wating on this.

I’ve commited some changes to the core that allow the ForgotManagerPassword plugin I’m attaching to work. It should be set to run OnBeforeManagerLogin, OnManagerAuthentication and OnManagerLoginFormRender.

I still have some work to do to make the email HTML, multi-linugual stuff and some other cleaning up but it works. I’d definitely like it checked for security reasons. Here’s a quick rundown of how it works and my reasoning.

I didn’t want passwords hanging around in emails or caches, instead I thougt it would be good to force the user to change their password. So an email is sent to the user with a hash that is generated from the current password and date among other things. When logging in the plugin checks the hash and if it matches it will authenticate the user. They will then be logged in as normal and can change their password. Because the hash is based on the current password and date the link will not work after they have changed their password or once the day is over.

I will keep working on this and hopefully have it very polished soon. It’s been a very busy week for me and it’s been hard to find the time to get this done but it shouldn’t take me more than an hour or so to get it 100% ready.

Thoughts? Comments?

... and OnManagerLoginFormRender

Where in the heck is that? Forget to add something to the manager action page perhaps?

Working great and in the latest test build. One minor issue:

When clicking submit and if you don’t have a valid email, it leaves just the message about not finding the user there with no way to try again:

Could not find user

Also, we’ll want to be able to style those messages as well... any info there is appreciated.