Support » Plugin: WP-Members: Membership Framework » Reset Password by email only

Viewing 4 replies - 1 through 4 (of 4 total)
  • ladober,
    I 100% agree. Its strange to have to ask for a username as its one of those variables that is most often forgotten by users. Hopefully it could just function with a single request for email address.

    JB

    Plugin Author Chad Butler

    (@cbutlerjr)

    At present, this is a two-stage system (username/email). While there is a set of code snippets to create a single-stage retrieval (email only) on the plugin’s premium support site, it is only something that can be done at this point with some customization. It may make it into the plugin as an option at some point in the future.

    I see. That’s a shame. Ill see if I can find an alternative plugin. Does that mean you have a premium version of the product or premium support model? If you have a premium version, does that still mean that the user has to implement these code snippets manually into the plugin? For that reason alone I wouldn’t purchase it. It needs to be a complete solution, designed well, and following industry standards e.g. single stage password reset.

    Thanks

    Plugin Author Chad Butler

    (@cbutlerjr)

    Does that mean you have a premium version of the product or premium support model? If you have a premium version, does that still mean that the user has to implement these code snippets manually into the plugin?

    It is a premium support model. And no, I would never recommend that any code be modified in the plugin. That does not follow WP best practices. The plugin is a fully featured framework. The plugin has over 60 action and filter hooks and 35 pluggable functions allowing you to customize the plugin from your functions.php file just like WordPress. Even the admin is extensible, essentially allowing plugins for the plugin. The code library available to premium support members consists of well over 100 code snippets and tutorials for users to quickly and easily deploy customizations. But that is not required for users to be able to use the plugin, and the online documentation for the plugin is freely available.

    I would disagree with you that a single stage password reset is “industry standard.” There are many different models of varying security. The model in the plugin is essentially a middle-of-the-road solution. A single stage password reset is the least secure option.

    For that reason alone I wouldn’t purchase it.

    My post was not intended to solicit you do so. But it would have been difficult to give you a complete answer without mentioning that this was available in the code library.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Reset Password by email only’ is closed to new replies.