Recover lost password

[Bill Parker]

I have changed some security config settings and have an issue. Originally (and still) my user id is an email address.

I just added the web security configuration setting for recovering a lost/forgotten password. This means that when I ran
a5ws_user_file_field_list() before the change, Email field was not listed. after the cahnge it is listed.

I have an "add users" component as described in the help file. This component does not have a control for Email, and when a new user is added the email field in websecurity_users.dbf is not populated. If there is no value in the Email field, when I try to recover a lost password I get an error ""Security information incorrect".

Adapting from a reply in another thread, I did the following
1. added a hidden field, Email, to the add user component.
2. in the Validate event I added a line of code, so the script is now

CurrentForm.Controls.Email.value = CurrentForm.Controls.userid.value
a5ws_save_user_values(CurrentForm,request)

Now when I try to add a user I get the error "Required Data Missing".

Can someone tell me how I should have tried to solve this problem? In the add user component I want to enter the email address only once. That is why I was hiding it and trying to set the value in xbasic.

Bill.

[JerryBrightbill]

Re: Recover lost password

The a5ws_save_user_values() takes values submitted to the component as a request variables, saves the values, and returns any errors to the currentform.controls pointer. The help clearly states "Only values passed in the request.variables property of the request variable are saved."

When the dialog first opens, none of the currentform.controls have any values. After you type in values and press submit, these values are sent to the server as request variables. In the component code, these are used to populate the currentform.controls. At the time of first submission, the email control was still blank and therefore the request variable for it was also blank. Since the function only uses the submitted request values, it sees a blank email value.

Your code will populate the control for email with the userid value after submission. If you submitted again, it would now submit that control value, which is now the userid and it would be saved.

Change your code to this and it will work

if request.variables.Email = ""
	request.variables.Email = alltrim(request.variables.userid)
end if 
a5ws_save_user_values(CurrentForm,request)

Testing for a submitted value for email was added to check if a value already exists and has been submitted. This prevents overwriting an existing value. However, if you always want the two to match, even if the userid is changed, then use this

request.variables.Email = alltrim(request.variables.userid)
a5ws_save_user_values(CurrentForm,request)

[Bill Parker]

Re: Recover lost password

Thanks Jerry. That solves the problem.

The Help file is explicit, if you understand what is going on. I now understand better.

Bill.