User Security Manager
User Security Manager - Password Recovery
Gravatar is a globally recognized avatar based on your email address. User Security Manager - Password Recovery
  Jim Monte
  All
  May 11, 2020 @ 07:29am

link in email

http://www.northeastmusclecar.com/usermanager/RecoverPassword.usm?id=oVALpbXjMLha9oDb

id must be wrong. When I click on the email link it still reroutes to ~/login.usm

FUNCTION RecoverPassword()
LOCAL lcPassword, lcVerify

poError = CREATEOBJECT("HtmlErrorDisplayConfig")

loUserSecurity = CREATEOBJECT(this.cAuthenticationUserSecurityClass)

lcValidationKey = Request.QueryString("id")

IF !loUserSecurity.GetUserByValidationKey(lcValidationKey) 

   Response.Redirect("~/login.usm")  && don't screw around - invalid id

   RETURN
ENDIF

After looking in the user dbf file the VALIDATE field is empty.. so looks like the key wasn't written in the table for the email link to validate against..

Jim

Gravatar is a globally recognized avatar based on your email address. re: User Security Manager - Password Recovery
  Jim Monte
  Jim Monte
  May 11, 2020 @ 08:05am

Well.. I stepped through it in debug mode.. It did save the validation key in the validate field.. Appears to work now..

© 1996-2020