When you use the "forgotten password" feature, a new password is supposed to be generated and emailed to the user. The user then clicks on a link in the email to confirm the new password.

However, when the "Protect Whole Forum" feature is enabled ($protectWholeForum = 1 in setup_options.php), the user is taken to the whole forum password page. When the forum password is entered, the confirmation page does not show and apparently the new password is not registered. Thus the user is still unable to log in.

Any ideas for some workarounds?

Of course, it doesn't :) and I guess we won't ever make it the other way, in terms of protected forum security. But after you've logged into protected forum, simply copy/paste url from lost-pass email to confirm.


regards,

gee
Yes, you need to be logged first into the whole protected forums, only then enter confirmation link. Not many people have this option, so maybe the best way to give users possibility not to be confused is to describe what they need to do in password email.

or, wait for, i think i saw this mensioned, the next version because that will have the option to turn off emial confirmation...

i duno sorry if that was no help
-Jeremy

jmahon
Where did you see that? :) There will be no such option. Because it's already is :)