View Issue Details

IDProjectCategoryView StatusLast Update
0011852mantisbtauthenticationpublic2011-08-02 12:35
Reporterxavierblue Assigned Todhx  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Version1.2.1 
Target Version1.2.3Fixed in Version1.2.3 
Summary0011852: Forgotton password feature prevents admin password reset
Description

When the forgotton password feature is turned off in config_inc.php this removes the [Forgotton Password] link from the login page.
It also has the unintented side effect of preventing e-mails being sent out for a password reset through the Management console.
This is caused by the use of 'lost_password_feature' in an if clause in email_api.php.

Steps To Reproduce

set $lost_password_feature = OFF in config_inc.php
attempt to reset a users password using:
Manage -> Manage Users -> {user) -> Reset Password

The result is that Mantis reports an e-mail has been sent to the user but it actually does not get sent by the email_api.php script.

Additional Information

The diff for email_api.php which resolved the issue:

--- core/email_api.php.old 2010-04-16 13:55:40.000000000 -0400
+++ core/email_api.php 2010-04-16 13:56:08.000000000 -0400
@@ -465,8 +465,7 @@

  • @return null
    */
    function email_send_confirm_hash_url( $p_user_id, $p_confirm_hash ) {
    • if( OFF == config_get( 'lost_password_feature' ) ||
    • OFF == config_get( 'send_reset_password' ) ||
    • if( OFF == config_get( 'send_reset_password' ) ||
      OFF == config_get( 'enable_email_notification' ) ) {
      return;
      }
Tagspasswords, patch

Relationships

has duplicate 0011902 closedatrol Reset password and user notification mails are not sent 

Activities

ilari@exove.fi

ilari@exove.fi

2010-04-27 06:34

reporter   ~0025287

Thanks for the patch! Works! :)
(Although Mantis reformatted the patch unusable for copy & paste. I had to edit PHP-file by hand.)

dhx

dhx

2010-08-05 04:38

reporter   ~0026220

Thanks Alex, I've committed your patch ready for the next release.

Related Changesets

MantisBT: master 23b1d934

2010-08-05 04:35

dhx


Details Diff
Fix 0011852: Forgotton password feature prevents admin password reset

When the forgotton password feature is turned off in config_inc.php this
removes the [Forgotton Password] link from the login page.
It also has the unintented side effect of preventing e-mails being sent
out for a password reset through the Management console.
This is caused by the use of 'lost_password_feature' in an if clause in
email_api.php.

Thanks to Alex Russell (xavierblue) for this patch.
Affected Issues
0011852
mod - core/email_api.php Diff File

MantisBT: master-1.2.x 5709cc99

2010-08-05 04:35

dhx


Details Diff
Fix 0011852: Forgotton password feature prevents admin password reset

When the forgotton password feature is turned off in config_inc.php this
removes the [Forgotton Password] link from the login page.
It also has the unintented side effect of preventing e-mails being sent
out for a password reset through the Management console.
This is caused by the use of 'lost_password_feature' in an if clause in
email_api.php.

Thanks to Alex Russell (xavierblue) for this patch.
Affected Issues
0011852
mod - core/email_api.php Diff File