Hi everybody,

Sorry - I'm relatively new to this stuff and haven't worked much with open source projects. I'm not sure where a feature/change request would go...

But I noticed that when you are using password reset, when the user requests a password reset, they are not forced to change their password on login. I get that sometimes you might not want them to, but I think it should at least be an option (and I think it'd be an easy thing to implement). Otherwise, the user needs to go through the whole process of finding where to change their password manually - and remember/want to bother.

Here's the code from UserController.cs:

Would it be possible to add a host setting for "Force Change on Password Reset" or something and then evaluate that in this block?

Thanks,

Mike

Thanks Mike... I just submitted it... Hope I did things correctly. I'll start paying attention to that Gemini site.

This is all been pretty frustrating. I think DotNetNuke has a fine password reset process, but they need to force a password change on login. I think this would be very easy to do - it's just the addition of that one line. But, I, and numerous others, have submitted requests to gemini and they never even get checked in. Maybe I'm doing something wrong.

I agree that DNN's default password process is bad - I am very surprised they don't switch the default to hashed with password resets... but for that to be effective, they need to force the password change when a user resets their password, otherwise it's a user-interface nightmare.