We are populating our database with existing records, and are mailing usernames to the owner of each record (each record's primary key is the username).
Users will need to go online and activate their accounts by entering their assigned username via sub html_signup_form. In the spirit of forced upgrades, we are making users submit an e-mail address to generate a password, instead of providing one for them. Using secure_password_lookup mod, they will then be able to change/update their own password/e-mail information, and all will have an e-mail address we can contact them by (mass mailing mod). The auto modify/view mod has also been added for single record access.
While using the existing sign-up form works fine, we want only usernames that match a record in the database to be able to complete the sign-up/activation process. If someone enters the wrong username, there is no verification to keep them from receiving a password and entering the database. While they won't be able to access anything (auto modify/view mod) without the correct username, I'd rather they not be floating around with limited access.
I did find two closely related solutions in this forum:
http://www.gossamer-threads.com/...=&vc=1#Post85911
http://www.gossamer-threads.com/...=25&Old=allposts
Does anyone have any suggestions based on the postings above, or possibly a different direction all together. I don't mind doing the work, but would appreciate any comments/code. Thanks!
Aaron Adams
----------------------
Like it, love it, need it.
Users will need to go online and activate their accounts by entering their assigned username via sub html_signup_form. In the spirit of forced upgrades, we are making users submit an e-mail address to generate a password, instead of providing one for them. Using secure_password_lookup mod, they will then be able to change/update their own password/e-mail information, and all will have an e-mail address we can contact them by (mass mailing mod). The auto modify/view mod has also been added for single record access.
While using the existing sign-up form works fine, we want only usernames that match a record in the database to be able to complete the sign-up/activation process. If someone enters the wrong username, there is no verification to keep them from receiving a password and entering the database. While they won't be able to access anything (auto modify/view mod) without the correct username, I'd rather they not be floating around with limited access.
I did find two closely related solutions in this forum:
http://www.gossamer-threads.com/...=&vc=1#Post85911
http://www.gossamer-threads.com/...=25&Old=allposts
Does anyone have any suggestions based on the postings above, or possibly a different direction all together. I don't mind doing the work, but would appreciate any comments/code. Thanks!
Aaron Adams
----------------------
Like it, love it, need it.
