Link with login in massmailer

Hi,

Is it possible to add a link in the mass mailer that login a user when he clicks it and opens the website? We want to send mails to invite people to append to a event. Most user forget there login and they don't border to ask for a new login and leave without appending. Thank you very much!

Regards,
Menno

It's possible to develop something like that, but we've no such implementation. The main issue is by the time you send the mass mailer the password has become encrypted and there is no way to reverse it. So you'd need to store the password plaintext in a second field or by some other means, which is not secure. It's a huge security risk to do something like this and I don't recommend it.

Hi,

Thanks for your answer. There is no critical information on the website. The login is only for members to append to an event. We use RSEvent Pro for the events.

Can you develop this?

Best Regards,
Menno

Might be able to use CB Auto Actions and its Login/Logout action acting on the onBeforeLoginFormDisplay trigger then you'd give them a URL to the login page with username and password supplied in the URL and substitute them in from [get_username] and [get_password] to auto login. You'd then provide a URL like the following.

index.php?option=com_comprofiler&view=login&username=[username]&password=[password]

As for keeping the password plaintext you could use CB Auto Actions to push it to another field.

I don't recommend keeping a plaintext password though. It's a huge security issue. This would work fine as a 1 off thing like in the registration email or the forgot login email (maybe) as it's plaintext for a short while before being encrypted. Storing the plaintext password for good is not a good thing for your users. What if they used the same password on 100 sites and yours gets compromised? You just compromised their login for 100 sites. Given it's not ideal to use the same password like that, but most people do. It's the responsibility of every site owner to keep its users information secure no matter how little that information is.

Thank you but this is not working. The massmailer does not replace [password] in de URL. Do you know anybody how can make a solution. Payed offcours.

Regards,
Menno

The URL can only be given to the user on the after registration trigger, the pending email, forgot login email (if requesting new password), or the after login trigger. Beyond that the password has become encrypted. So it will not work in the massmailer. We do not support plaintext password as it's a vulnerability so we can not help you with that.