What notification does the user receieve after resetting their password?
Thread Starter
TacoV
(@tacov)
Sadly, I found I cannot reproduce the problem. Both with “Reset Password -> Disable Admin Notification” checked and unchecked, no notification of the password change is sent to the user. The custom e-mail under Reset Password is sent to the admin account when the checkbox is unticked.
One of the previous mails, however, reads:
[<sitename>] Notice of Password Change
Hi <username>,
This notice confirms that your password was changed on <sitename>.
If you did not change your password, please contact the Site Administrator at
<sitemail>
This email has been sent to <address of user>
Regards,
All at <sitename>
<siteurl>
So, for me, this is not really a problem anymore – the users aren’t affected. I still wonder though, where to change this (both the setting whether to send a mail to the user, and the actual text in the e-mail). We have 4 e-mails (New User, New User Admin, Retrieve Password and Reset Password). I would expect a Reset Password together with a Reset Password Admin for a grand total of 5 e-mails.
Thread Starter
TacoV
(@tacov)
Ah, I see where I went wrong now.
The notification appears when I CHANGE my password, not RESET it. Via the profile page.
So the question should’ve been; can we customize the password-changed notification?
So, which notification is this? The admin password changed notification?
Thread Starter
TacoV
(@tacov)
No, the user password changed notification.
Steps to reproduce:
1) Clean WP install
2) Install and activate WP Mail Logging and Theme my Login
3) Enable the Custom E-mail module
4) Change all mail bodies (the Message) to something like “Not this one”; New User, New User Admin, Retrieve Password and Reset Password
5) Go to profile and change your password
6) Go to Mail Log and see the message sent:
Time:
2015-11-05 10:03:25
Receiver:
wordpress@wordpress.local
Subject:
[Wordpress clean] Notice of Password Change
Message:
Hi wordpress, This notice confirms that your password was changed on WordPress clean. If you did not change your password, please contact the Site Administrator at wordpress@wordpress.local This email has been sent to wordpress@wordpress.local Regards, All at WordPress clean http://wordpress.local
Headers:
Attachments:
As you can see, this message (a notification to the user that his/her password was changed) is none of the 4 customizable messages in the Custom E-mail Module.
Thread Starter
TacoV
(@tacov)
Additional info that might help:
The notification e-mail is new in WordPress since 4.3. See the 4th bullet point in the release notes:
CORE CHANGES
What’s New:
User-change emails. The system will now email a user when their password or email is changed, in case they didn’t do it.
The hook to hook into would be send_password_change_email.
EDIT: And, probably send_email_change_email for when they change their e-mail address!
Ah. I wasn’t even aware of this e-mail. TML isn’t either.
Thread Starter
TacoV
(@tacov)
I figured as much. I will try to make a pull request for this on github, although that may take some (a lot of) time. Or would you prefer to implement it yourself? (Assuming you do want to extend the plug-in to these emails)
I always want to keep TML at least on-par with wp-login.php…
I needed the same thing. I created a pull request to allow TML to override the Notification of Password Change email:
https://github.com/jfarthing84/theme-my-login/pull/65
Enjoy.
tried to follow along on this thread but don’t see any obvious solution — how can I “control” the password-reset email that Users receive? the one with Subject: [sitename] Notice of Email Change
we want to edit that to remove some things but I don’t see that template in TML / Emails
sorry if this has been identified and I’m just not reading it correctly.
Thread Starter
TacoV
(@tacov)
Well, there is no obvious solution. Maybe in the future the obvious solution will be simply to update 🙂
The action isn’t implemented in TML yet, but to fix it yourself you should hook into send_password_change_email and send_email_change_email.
An example and (probably working) solution for the password-change notification can be found in the PR of contemplate. Changing the e-mail-change notification would be largely similar.
