Quadodo - Change Password

[Gamerz]

How do I make it so the user can have the ability to change there password on there own without the script e-mailing them.

Like, the user types the old password, and new password. The script matches the old password and current password, to see if it matches...if it does, the script changes the password to the new typed password.

Thanks.

[jeffr]

You would have to write a PHP routine to do that. It's not something the Quadodo script can do.

You would pull out the password code from the database, create a hash code with the typed-in old password and compare the two to see if they match. If they do, then create a new hash code with the new password and write it back to the database. Not too hard to do.

But you're giving up a level of security. By emailing a link back to the user, you're verifying - by way of an email address - that this user who is requesting a password change also has access to his email.

Your call, of course.

[Venkatswamy]

I think what gamerz meant was altering the change password routine after the user has logged in with valid username/password. That way the genuineness of the user is already established. What you say holds good for the 'forget password' feature.