Hello,
I was testing a change password page and I was able to change the password (presumably successfully since we got the success message).
But afterward every page in the site, even in different browsers where we didn't login, is locked down. I get the following error:
Error 401: Unauthorized
Unauthorized
You are not authorized to view the requested content.
Here is the form for Change Password:
[[!ChangePassword?
&submitVar=`change-password`
&placeholderPrefix=`cp.`
&validateOldPassword=`1`
&validate=`nospam:blank`
&reloadOnSuccess=`1`
&successMessage=`Your password has been successfully changed`
]]
[[$customLgnChangePasswordForm]]
And the Form itself:
[[!If? &subject=`[[!getUrlParam? &name=`logcp-success` &int=`1`]]`
&operator=`EQ`
&operand=`1`
&then=`<p class="updprof-error">Your Password has been changed</p>`
]]
<div class="updprof-error"><span class="error">[[!+cp.error_message]]</span></div>
<div id="contact_form">
<form class="form" action="[[~[[*id]]]]" method="post">
<input type="hidden" name="nospam" value="" />
<div class="ff">
<label for="password_old">Old Password
<span class="error">[[!+cp.error.password_old]]</span>
</label>
<input type="password" name="password_old" id="password_old" value="[[+cp.password_old]]" size="50" />
</div>
<div class="ff">
<label for="password_new">New Password
<span class="error">[[!+cp.error.password_new]]</span>
</label>
<input type="password" name="password_new" id="password_new" value="[[+cp.password_new]]" size="50" />
</div>
<div class="ff">
<label for="password_new_confirm">Confirm New Password
<span class="error">[[!+cp.error.password_new_confirm]]</span>
</label>
<input type="password" name="password_new_confirm" id="password_new_confirm" value="[[+cp.password_new_confirm]]" size="50" />
</div>
<div class="ff">
<input type="submit" name="change-password" class="button" value="Change" />
</div>
</form>
</div>
Any ideas how this could cause this issue and more importantly, how we can get the site visible again?
☆ A M B ☆