Products

Solutions

Learn More

Partners

Community

Blog

About

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDevelopment and...Development and...DNN Platform (o...DNN Platform (o...Password Reset LinkPassword Reset Link
Previous
 
Next
New Post
11/26/2013 1:26 AM
 
I'm afraid not, it's hardcoded so would require a code change (if you're confident in doing that let me know and i'll pull out the necessary change(s) for you)- please feel free to log an enhancement request to make it configurable (ideally via community voice so we can see if there is a demand for it), but it might be an idea to let you users know they can make their own reset requests rather than up the limit and potentially forget to set it back (which would be a bad thing from a security perspective)

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
2/17/2014 11:04 AM
 

I need to make this change as well. My client requires the password reset link to be valid for at least 2 weeks.  I can make the code changes if someone could point me in the right direction it might save me several hours.

 
New Post
2/17/2014 3:29 PM
 
Hi Chris,

With Cathal's help, the team discussed this, but decided to not implement this recommendation. I may mis-translate it, but my understanding was that it could create confusion for people because they could request a password and have it become invalid before the receive it. That would happen if you had the reset timeout window set to 120 minutes, and somebody requested another email after 115 minutes.

Personally, I would think that the window could just be extended once before the new link is generated, or allow multiple tokens to be active simultaneously (which might already be the case). But, I wasn't there for the discussion and I'm sure there are some good arguments on that side.

In any case, you could set the reset window to a very long time - that's in the host settings - and is slightly different from the discussion here.

Hope this helps,

Mike
 
New Post
2/17/2014 3:38 PM
 

There are two different password reset expiration periods - one is for resets initiated by the user (i.e. on the login screen) - as Mike says this is configurable in host settings. The second expiration is for when an admin/host reset's a users password - as the user may not be expecting that to happen the period is longer. At present it's hardcoded as 24hrs (I've no problem making it configurable but I don't recall someone logging it in jira yet).

If you want to change the admin reset expiration you'll have to edit   DesktopModules\Admin\Security\Password.ascx.cs - look for the following and change the 1440 to your desired value (it's in minutes)

//create resettoken valid for 24hrs

 UserController.ResetPasswordToken(User,1440);


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
2/17/2014 3:40 PM
 
here's the link for setting the user password reset validity - http://www.dnnsoftware.com/help#Docum...

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
Previous
 
Next
HomeHomeDevelopment and...Development and...DNN Platform (o...DNN Platform (o...Password Reset LinkPassword Reset Link


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.

Content Layout

Subscribe to DNN Digest

Subscribe to DNN Digest

DNN Digest is our monthly email newsletter. It highlights news and content from around the DNN ecosystem, such as new modules and themes, messages from leadership, blog posts and notable tweets. Keep your finger on the pulse of the ecosystem by subscribing.  

What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out