emailOnApproved plugin problem

Hi Koen,

The second password is actually an encrypted version of the first password. Once a password is encrypted and put in an account record, it can't be unencrypted, so there isn't a way to send the password in the second email (unless you kept a plain text copy of the password, but this would ruin the point of encrypting).

In the second email, you can tell them that their account has been approved and that they can now login using the password they originally got when registering. If they can't remember their password, you can direct them to the page where they can reset it.

Hope this helps

Hi Jason,

Thx for the reply, the idea is not to show the password in the first e-mail (only word of thanks for registering and some payment instructions) and send the 2nd e-mail with the password after membership payment has been received... There´s no way around this encrypted password in the 2nd mail ?

Koen

Jason, is it possible to send the password in the 1st mail anyway while not allowing them to login as long as I don´t have them approved in admin? They would get a not approved yet message when trying to login... until they get approved.

I saw this function in the forum:"if ($CURRENT_USER['approved'])" but don´t know how or where to use it...

Hi Jason,

You said: Then, in your "emailOnApproved" funciton, you can create a new password, using the same code that creates the password when registering

Where can I find the "same code that creates the password" please ? Is it in user-new-signup.php please ?

Thx for your support.

Koen

Hi Koen,

There is a "disabled" checkbox in the accounts table that you can set to 1 when an account is created. For example:

mysql_query("INSERT INTO `{$TABLE_PREFIX}accounts` SET
fullname = '".mysql_escape( $_REQUEST['fullname'] )."',
email = '".mysql_escape( $_REQUEST['email'] )."',
username = '".mysql_escape( $_REQUEST['username'] )."',
password = '".mysql_escape( $passwordHash )."',

disabled = '0',
isAdmin = '0',
expiresDate = '0000-00-00 00:00:00',
neverExpires = '1',
createdDate = NOW(),
updatedDate = NOW(),
createdByUserNum = '0',
updatedByUserNum = '0'")
or die("MySQL Error Creating Record:<br/>\n". htmlspecialchars(mysql_error()) . "\n");

This code is found in the user-signup page that came with the Website Membership plugin.

So when you go in to approve a user, you can uncheck the disabled check box so they are able to login.

The code that is used to create a password is also found on this page and looks like this:

// generate password
$password = substr(md5(uniqid(mt_rand(), true)), 15); // example output: c5560251ef0b3eef9
if (@$SETTINGS['advanced']['encryptPasswords']) { $passwordHash = getPasswordDigest($password); }
else { $passwordHash = $password; }

At the end of this code $password will be the plain text version of the password and $passwordHash will be the encrypted version that you will save to the accounts record.

Hope this helps