Membership Plugin - Password Request Feature?

Hi Perch,

The older versions of website membership had a password reminder feature. However, once we switched to encrypted passwords, this was no longer possible. The encryption we use is one way only, so we have no way of taking an encrypted password from the database and decrypting it back into plain text.

I can certainly see where the confusion comes from. A more descriptive file name may be user-password-reset-request.php (you can always change the names of the files).

Hope this helps to clarify things. Please let me know if you have any other questions.

Thanks

Hi Perch,

The default process that comes with the plugin is meant for further authentication. If you email them the password, you are proving that they at least have access to that email address, so the address itself isn't fake.

That being said, you can alter the signup form to allow someone to create their own password when signing up.

Hope this helps

Hi Perch,

You can (although not the greatest idea) reduce the number of characters in the password.

Here's the (untested) recipe from my CMSB Cookbook thecmsbcookbook.com that shows you how.

CHANGING PASSWORD LENGTH

When a new user signs up for an account, a randomly generated 17 character temporary password is sent to them. That's pretty secure, but if it's a bit unwieldy for your situation, you can easily change the password length to any amount of characters.

In the user-signup.php file, look for the code:
$_REQUEST['password'] = substr(md5(uniqid(rand(), true)), 15);

According to Chris Waddell of Interactive Tools "The 15 in the code skips the first 15 characters of the 32 characters returned by md5(), resulting in a 17 character string."

To set the length to 5 characters, try this:
$_REQUEST['password'] = substr(md5(uniqid(rand(), true)), 0, 5); // example output: c5560
You can replace the 5 with any number you'd like up to 32.

Hope that helps,

Jerry Kornbluth