I have a database that we are implementing for an alumni group. There are a limited number of users (400). We assign each member a username and password, initially.

I'd like to make it easy for the users to change their password themselves. Ideally, this could happen at the login screen. You know, new passord: and confirm new password: with some sort of confirmation. So they'd have to know the old password to put in a new one, and they'd get a screen that would inform them the password had been changed. No e-mailing is necessary.

Anybody know how to do that?

It should be just a matter of altering the change password mod.

You'll need to add two input fields to sub html_login_form and sub html_login_failure. Call the new fields

new_password and new_password2

In auth.pl, sub check_password, change the lines from

through

to

There are several downsides to this. First, it will require that the script go through all of the lines in the .pass file, instead of stopping when it finds the correct one. This could slow down the login for some of your users. Second, there is no confirmation that the new password actually was added. I think it is important to tell people that they have succeeded in what they wanted to do. But if you don't care, that's fine.

I haven't tested the above, except for syntax errors, but I think it will do what you want.

JPD
http://www.jpdeni.com/dbman/

What I dont understand is why, is it hard to do first, match or find if there is such a user... then when looking for a password only check first for a user... after you find a user check the current password, then change it.

I would like a simple mod like this to work with the normal dbman passfile, without having it be totally changed.

You could really hmm use it for any type of format of passfile, it would be just a matter of which feild you are searching first and were it is located, you could make example which things should go first if say you got this layout for your passfile and so on...

I would write a simple mod like this if i knew php/cgi stuff but im a n00b and only know java so far heh, i think a simple mod should have been done first before any other complex method

one reason maybe hmm someone isnt using the sendemail, or doesnt have support like free hosting (for spam reasons) I think a simple change pass mod is a must.

There is a change password mod in the Resource area of this site. (Resource are found under Support)

~ Karen

yes I looked I do not want the one with the emailing and such... as I have stated free web hosts don’t always support "sendemail" so I just would like to change the password for a user as long as they are say already logged in and give them a right to do so... I believe this can be done the same way the admin section but only take the method that calls for update user which is the change password and make your own method just like that but accessible to users who are login and they don’t have to have admin permissions.



Is that so hard to do? to me i think that is a lot easier then all the other mod's and could have been or should have been placed into dbman anyway... I mean at least you should expect to let the user change there password, if say you do not let a user signin/create there own account... which im sure there are people who do that...