Forget password hyperlink does not go to Forget password form

377 Posts

worchyld Reply #1, 17 years, 9 months ago

When I (on purpose) put a wrong password inside the "Web User Login Form", it outputs the following message;

Your password was incorrect.

Your Failed login count is 1. You will be blocked for 60 minutes for more than 3 failed attempts.

Please try again.

Perhaps you forgot your password?

The "Perhaps you forgot your password?" is a hyperlink. In addition there is a "Forgot Passsword" button on the form.

In my example the hyperlink says;

http://modx.localhost:85/index.php?id=3?service=forgot

However if you attempt to press the hyperlink I always get returned to the homepage. Even if I do a very basic call.

What’s weird is that if you press the "Forget Password" button , this works fine and goes to the right page.

1. Why does the URL go to the wrong page, and how do you fix it?
2. Is it possible to hide the message as quoted above?

Thanks

377 Posts

worchyld Reply #2, 17 years, 9 months ago

I couldn’t figure out why the hyperlink goes to the wrong page, so I hid the message instead.

To do this, you go to the "lang" folder and edit the "en.php" file and remove any instances where it has the "Perhaps you forgot your password?" hyperlink.

247 Posts

Gav Reply #3, 17 years, 9 months ago

If you simply hide the message in the way that you’ve described, does this stop you from being locked out for 60 minutes if you enter the wrong password three times?

If not, is there a way of disabling this feature?

I have several users sharing a single set of login details but I don’t want one user locking the others out.

Thanks in advance!

1,010 Posts

TobyL Reply #4, 17 years, 9 months ago

Quote from: worchyld at Dec 10, 2008, 11:54 PM

I couldn’t figure out why the hyperlink goes to the wrong page, so I hid the message instead.

To do this, you go to the "lang" folder and edit the "en.php" file and remove any instances where it has the "Perhaps you forgot your password?" hyperlink.

This is a bug in WebLoginPE where some links are build wrongly when you are not using friendly urls. It is being worked on and the next version should have this sorted out I expect! In the mean time instead of hiding the message you can edit the language file to show the correct url. In teh english language file it is this entry:

//<?php
$wlpe_lang[20] = '<p>Your password was incorrect.</p><p>Your Failed login count is [+000+]. You will be blocked for [+111+] minutes for more than [+222+] failed attempts.</p><p>Please try again.</p><p>Perhaps you <a href="[~[*id*]~]?service=forgot">forgot</a> your password?</p>';

change <a href="[~[*id*]~]?service=forgot">forgot</a> to <a href="[~[*id*]~]&service=forgot">forgot</a>

eForm | eForm support | eForm @ wiki

1,010 Posts

TobyL Reply #5, 17 years, 9 months ago

Quote from: Gav at Dec 17, 2008, 08:15 AM

If you simply hide the message in the way that you’ve described, does this stop you from being locked out for 60 minutes if you enter the wrong password three times?

If not, is there a way of disabling this feature?

I have several users sharing a single set of login details but I don’t want one user locking the others out.

Thanks in advance!

Most certainly not. Hiding something does not change the functionality, it just makes something not visible

.

Incorrect logins (and correct logins for that matter) are handled by modx and it is modx (not webloginpe) which enforces the temporary locking of a user after three unsuccessful attempts. You can change the number of failed logins before a user is locked out as well as for how long a user is locked out in the manager Tools >> Configuration >> user but I don’t think you can disable it all together. if you set this to a really high number you do open up your site to brute force attacks so be careful. It would be much better to give your users individual logins. Thsi is very easy to do in teh manager so why not?

eForm | eForm support | eForm @ wiki