I have WebLoginPE up and running... I like it a lot!
The only thing is in my setup of WebLoginPE is that when I block a user from inside the manager it seems that the blocked user can unblock himself when he uses the password reminder... and activate his new password with the link an key send by mail... and so he can login right away.
Can anybody please try this on their WebLoginPE setup and confirm this is true?
I also get this error in FireBug when I set the checkbox blocked inside the modx manager can this be the problem?
blocked is not defined
changeblockstate(input 0, input on)index.ph...88&id=120 (regel 133)
onclick(click clientX=229, clientY=181)index.ph...mYw%3D%3D (regel 2)
[Break on this error] blocked.innerHTML="<b>Deze gebruiker ...slaan van zijn gebruikersgegevens!</b>";
The send user new password feature then allows the user to authenticate themselves by following the emailed link.
This does indeed unblock them.
To avoid this method of unblocking I think you’d need to remove the forgot password button/section of the login template.
This would mean users who have genuinely forgot their password would need another method of getting a new one.
Hello Bunk58,
Thanks for your reply and testing really appreciate it!
Now I know that my setup is not wrong, Thanks!
Did you noticed any errors in FireBug when checking and unchecking the "blocked" checkbox?
I don’t use Firebug inside the Manager as it seems to slow it down, also I think it reports every error/warning regardless of severity.
Ok thanks for the info!
What do you think about the blocked and unblocked behavior with the passwordreminder.
Shouldn’t be possible don’t you think?
But that’s the point of the password reminder.
It lets users who’ve been blocked because they tried to login three times incorrectly, get a new password and login.
If you want to ban a user permanently just delete them, or have you tried the blocked until field in the Manager?
Totally clear Thanks!
I was thinking to use the checkbox "blocked" to disalow users to login before admin approval, now I will use a pending and approved group.
