By rentex on

Hello.

On my Drupal 4.7 sites:

- Drupal pre-4.7 Head
- Drupal 4.7 Beta 3
- Drupal 4.7 Beta 4

Issue:
- Before logging into Drupal, I request a new password using Drupal's GUI. I get the email and no "errors on-screen/SQL-errors".
- Username is showing correctly in the email, however password doesnt seem correct (can't login using it), it is always the same (showing %password even if I ask to resend).

After all this I can still login using the old password.

I have a Drupal 4.6.3 powered website and that one manages to create/send/display new passwords.

Questions:
- What can possibly cause this (bug in Drupal 4.7...)?
- Where to look first, if going to troubleshoot (how to approach: look into the DB using PHPMyAdmin, which tables too look into, what values to look for/erase/create...)?

Any help is greatly appreciated!

⋅ Categories: Drupal 4.6.x, Drupal 4.7.x

Comments

Heine’s picture

Heine commented

Did you upgrade from a 4.6 site? The message upon pwd retrieval has changed. Nowadays users get a onetime login link.

Sample message
-------------------------------------
%username,

A request to reset the password for your account has been made at %site.

You may now log in to %uri_brief clicking on this link or copying and pasting it in your browser:

%login_url

This is a one-time login, so it can be used only once. It expires after one day and nothing will happen if it's not used.

After logging in, you will be redirected to %edit_uri so you can change your password.
-------------------------------------

--
Tips for posting to the forums.
When your problem is solved, please post a follow-up to the thread you started.

Swooperz’s picture

Swooperz commented

So, what happens to all existing Pre-4.7 users that might need to change their password? Is no backwards compatibility in place?

Sounds like you're saying that all users should sign up from scratch again. :/

Surely this isn't the case and I would like to make sure, before I upgrade Drupal and run into the same issues that the author of this post did.

Heine’s picture

Heine commented

Sounds like you're saying that all users should sign up from scratch again. :/

Fortunately not. The site adminstrator only has to make a new 'password reset' message (sample text above) and voila.

For the RC or stable release upgrade.php has to inform the admin or overwrite the custom message (while saving the old one).
--
Tips for posting to the forums.
When your problem is solved, please post a follow-up to the thread you started.

rentex’s picture

rentex commented

I will try and find out.

rentex’s picture

rentex commented

Yes that was the solution.

I upgraded from version 4.6.3 to 4.7.x, and the forgot-password-email was inherited from the previous version.
To fix this I only copy/pasted the email from a Drupal 4.7.x out-of-the-box using Drupal's GUI in the Administer section

Sample email message in Drupal 4.7.x
-------------------------------------
%username,

A request to reset the password for your account has been made at %site.

You may now log in to %uri_brief clicking on this link or copying and pasting it in your browser:

%login_url

This is a one-time login, so it can be used only once. It expires after one day and nothing will happen if it's not used.

After logging in, you will be redirected to %edit_uri so you can change your password.
-------------------------------------