netsys
Posts: 39
|
| Posted: 05/23/2011, 12:43 PM |
|
When a user forgets their password, I would like to send out a link that allows them to reset their password, rather than sending out their password to them directly. Has anyone implemented this?
My thought was to add a column to my user table, something like reset_password_ID, and autogenerate a long number for this field using javascript, then e-mail a link containing this number, and check for it in the URL when they come to the site. Then, if it matches, allow them to reset their password.
I can't seem to find any documentation about how this is being done. Any input? Thanks!
Beth Perkins
|
 |
 |
Oper
Posts: 1195
|
| Posted: 05/23/2011, 2:18 PM |
|
The way you explained is the way to go.
just keep in mind to use the datetime to generate the new STRING
we use 80 Character long, also, i will recommend clear the Field as soon you changed the passwpord
also if you want to be more Security-Close:
First Email: Send Link to Reset Password (after Cliking that Page then
you send a 2nd Email with the link of the Reset password page.)
Change StringCode on Both and use a field for FASE change.
we do the 2nd way.
But This depend on how delicated is your info, the way you described work.
PS:We are Using Catcha on Both, just dont forget to clear Strings Field.
_________________
____________________________
http://www.7bz.com (Free CMS,CRM Developed in CCS)
http://www.PremiumWebTemplate.com
Affiliation Web Site Templates
Please do backup first |
|
|
|
|
