en-CAfr-CA

Fix: DotNetNuke users can't reset their password

Oct 24 2014

I have received quite a number of request for help lately about DotNetNuke users that are not able to reset their password. In this blog post, I will explain what the problem is and how to resolve it.

First, this issue is mainly affecting multilingual websites. This is because the actual feature is not broken but it is a problem with the text being shown to the users. So their is usually no problem if the message comes from the standard DotNetNuke language file, but you need to update the text for the other languages used in your website.

The issue is that the Membership:Password token used to display the password to the user and it no longer works. In other words, the previous procedure was to simply email the password to the user, for security reasons it is now a new procedure. The site send a password reset link to the user, the user clicks it and changes the password for a new one on the website. This prevents the password by email which is not very secure.

So to fix this issue:

  1. Login to your website as SuperUser or Host (if possible, if not, you can also do it with an admin account)
  2. Go to Admin -> Languages in the control panel
  3. Click the pencil for each language under System or Host ( if you don't see System, you are not a SuperUser, click on Site instead)
    The difference between these 3 options are the following:
    System: Will affect all sites but will be overwritten if you install an updated language pack
    Host: Will affect all sites and will not be overwritten if you install an updated language pack
    Site: Will only affect the site you are on
  4. Scroll down (or search) until you see a resource named: EMAIL_PASSWORD_REMINDER_BODY.Text
  5. Translate the text you see on the left to the language you are editing buy keeping the tokens exactly as they are (do not translate them). Tokens are indicated in bold here without their [ and ] symbols, because they would show you the replaced value instead of the token. So don't forget on your site to put [ before and ] after each item in bold:
    Dear User:DisplayName,

    You have requested a Password Reset Token from Portal:PortalName.

    Please login using the following information:

    Website Address: Portal:URL
    Username:   User:Username

    Link to reset password: http://Portal:URL/default.aspx?ctl=PasswordReset&resetToken=Membership:PasswordResetToken

    Sincerely,
    Portal:PortalName

    *Note: If you did not request a Password Reset Token, please disregard this Message.
  6. Finally scroll to the bottom and save the changes.

Total: 0 Comment(s)

Author

Daniel Valadas 13114 9

Calendar

2018 Jul  11  1
2018 Jun  26  1
2018 May  48  1
2014 Oct  3179  3
2014 Jun  4935  1
2014 Feb  3437  1
2012 Mar  1478  1

Recent Posts

Core modules development team first meeting recording
2018-07-06 12:53 PM | Daniel Valadas
Removing Roadblocks to Upgrading By Reviving the Old Core Modules
2018-06-25 4:23 PM | Daniel Valadas
How to secure a whole Dnn site with an SSL certificate
2018-05-08 4:51 PM | Daniel Valadas
Take a list of emails and separate them with a semi-colon (;)
2014-10-24 5:14 AM | Daniel Valadas
Fix: DotNetNuke users can't reset their password
2014-10-24 3:21 AM | Daniel Valadas
Fixing duplicate Display Names in DotNetNuke
2014-10-19 11:17 PM | Daniel Valadas
Creating a webservice in DotNetNuke 7
2014-06-11 1:02 PM | Daniel Valadas
How to move a DotNetNuke Website to another server
2014-02-10 10:51 AM | Daniel Valadas
World Backup Day
2012-03-31 1:28 PM | Daniel Valadas