Just the usual ’one more little fix before going home’ disaster...
I wanted to change the name of the admin in the manager, went to the security page, entered the new name and choose to also generate a new password and view it on screen; clicked on the submit button and got kicked-out without seeing the new password! just a javascript dialog "password has been changed, you need to login again’
shocked...How do I regain possession of my site ?!?!? phpmyadmin to the rescue ?!?
this is the worst thing that ever happened to me with MODx; known bug or what ?!
Ciao, I’ll go home anyhow and try to fix tomorrow
To manually reset the password, use phpMyAdmin to browse the ’manager_users’ table, edit the admin user’s row, replace the encoded password with your new one, and choose "MD5" from the Function dropdown for that field.
OK it worked
THANKS
it is such a simple and quick fix that after doing it I felt like trying the password reset again from the manager, this time I chose to have it sent by e-mail, and again it went wrong, I did not receive the new one.
Isn’t it a (pretty serious) bug ?! should I file it on flyspray?
-
☆ A M B ☆
- 24,524 Posts
Yes, it looks like if the logged in manager is changing his own password the process gets short-circuited by the "your account has changed you need to log in again" business. That should definitely be handled differently if the password is being generated; the message and automatic logout should come after the new password is displayed or mailed.
Actually, I don’t see any reason for the current login session to be aborted; if it’s the current user changing his own information the SESSION could just be updated to reflect the changes.