Hello CB, had written a longer post but changed approach. Tried the forums for answer. Autocomplete came up.
If autocomplete is used in a browser - which is the case for many I would imagine - what's the best way to approach allowing a user to change their password in profile edit, with verify also used?
Notes: if browser autocomplete on, password is required, verify used - system asks for verify password on 'edit profile' - after press update, everytime.
Additional notes: I have 2 sites, same settings, problem with this on one not the other.
Thought of just allowing Moderator's to edit, but that doesn't fit, as it should be private..Maybe take away verify, would avoid if possible. Any ideas?
jpdenny1 wrote: Hello CB, had written a longer post but changed approach. Tried the forums for answer. Autocomplete came up.
If autocomplete is used in a browser - which is the case for many I would imagine - what's the best way to approach allowing a user to change their password in profile edit, with verify also used?
Notes: if browser autocomplete on, password is required, verify used - system asks for verify password on 'edit profile' - after press update, everytime.
Additional notes: I have 2 sites, same settings, problem with this on one not the other.
Thought of just allowing Moderator's to edit, but that doesn't fit, as it should be private..Maybe take away verify, would avoid if possible. Any ideas?
To be honest I have no personal experience with this.
There are many google topics that exist - perhaps one of them might help:
Thanks Nick, had a read - said if autocomplete off browsers will still remember and use.
Trouble is that I started registering test accounts and this came up right away. Like I said no issue on other very similar site with same password settings.
I will need a workaround, which seems like not showing password in edit profile. Wish the two sites could switch as this would work better on other.
Question: forgetting about autocomplete, I need to find out if the way I do this is correct. I set password to show in profile edit - user sees an empty password field in profile edit, can change it by entering new one and updating?
To be honest I think password could be dealt with better (assuming above is true). Or change of password. Idea: new change of password field, shows as link in profile edit, links to a few input boxes e.g. 'current password', 'new password', 'confirm new' 'security question'. That would do the trick nicely.
Additionally, when edit password is not in profile edit, when a user resets password underneath login, there's no way for them to change it to something of their preference.
Unless a Moderator changes it for them. Extra work and lacks privacy.
Think I'll have to take verify password out of both sites as a solution. Shame that I lose this function. (One will have their password filled the other won't for some strange reason, but will function the sameanyway).
Personally I think password function needs to be examined.
My only guess is that one of your site started with an older version of CB and your browser memorized the password while autocomplete off wasn't there. Easiest is to show your password and erase the memorized password. New users won't have that issue.
Indeed, you need to disable the password recovery link in CB module if you don't allow to change password in profile edits.
We recommend to allow users to change their passwords themselves from time to time for security reasons.
The trick with the link or button to change the password separately is indeed a possible solution to overzealous browsers.
nant
