I've got a clients site that's been upgraded to 7.3.x and now (locally) to 7.4.0.

We have an issue where the user attempts to reset their password.  They get the confirmation email.  Click the link but are never able to reset.  Same generic message.

Upon further digging - I've noticed that the user's PasswordResetToken is NEVER SET in the DB.

In looking at the 7.4.0 source - the PasswordResetToken is generated and then passed to the stored procedure "UpdateUser".  According to the 7.4.0 source - the proc takes 16 values.

When I check the UpdateUser proc on this site - it only has 13.  Thus - the PasswordResetToken is never set.

I attempted to update the proc  - but after recycling the app pool - and attempt to reset - I get an error about invalid parameter count.

Upon further investigation - it looks like the sp was suppose to be updated in 07.01.00 -

Any insight would be greatly appreciated