Thread: Forgot Password Problem- CLEAN

There is a problem with the forgot password in CLEAN. The new password that is generated and sent to your email address does not let you log in. This is also true on the modmysite demo.


=====
FIX
=====
in forgot.php change md5(`Password`) to just 'Password'

Originally Posted by Tee

There is a problem with the forgot password in CLEAN. The new password that is generated and sent to your email address does not let you log in. This is also true on the modmysite demo.


=====
FIX
=====
in forgot.php chnage MD5('password') to just 'password'

OR

('Password')

????

Yes - since CLEAN allows the admin to choose to use or not use encrypted user passwords at installation - there needs to be a check in forgot.php to see which choice the admin made - and use the appropriate password code.

We will post a fix here shortly, and also apply to the next release of CLEAN.

Smoge

filename : forgot.php IN function PageCompPageMainCode()

find :

$sQuery = "UPDATE `Profiles` SET `Password` = md5(`Password`) WHERE `ID`='{$memb_arr['ID']}'";

replace :

if ( !getParam("password_plain_text") )
{
$sQuery = "UPDATE `Profiles` SET `Password` = md5(`Password`) WHERE `ID`='{$memb_arr['ID']}'";
db_res( $sQuery );
}

Tee - I see on the clean demo site - your password is MD5 - please use forgot.php again there to reset it to pain text (since we have applied the fix)

thanks alot it was very helpful