PR8 Update7 Forgot Password - No confirmation / validation

[elisabeth_hale]

This isn't exactly covered in the Bugs post, or anywhere else that I can find. I've finally gotten the new customer e-mail/pwd setup finished, but there's a problem which I'm not sure is because of something I missed, or if it is how the system is supposed to work.
When following the Forgot Password link to FPWD, enter e-mail, and click Submit, there is no confirmation or e-mail validation, you are just returned to the Login page. Considering how many multiple email accounts people have these days, I think this is essential. I want to click Submit, and get a confirmation that says We sent you an email, or Your email address is not on file. Have I missed a step? Or can I add this in?
Thank you very much! Otherwise, I am very pleased with Up7.
Elisabeth

[Ron Frigon]

Re: PR8 Update7 Forgot Password - No confirmation / validation

Copied and pasted from my LOGN Header:

<mvt:if expr="g.Customer_Login_Invalid">
    <p class="error-message">Invalid Email Address.<br />We were unable to locate an account with that email address. Please confirm and re-enter your email address.</p>
    <mvt:item name="toolkit" param="sassign|invUser|true" />
<mvt:elseif expr="g.Customer_Password_Invalid">
    <p class="error-message">Invalid Password.<br />Please confirm and re-enter your password or click Forgot Password below.</p>
    <mvt:item name="toolkit" param="sassign|invPass|true" />
</mvt:if>
<mvt:if expr="g.Error_Messages EQ 'Customer not found'">
    <p class="error-message">Invalid Email Address.<br />We were unable to locate an account with that email address.</p>
</mvt:if>
<mvt:foreach iterator="message" array="messages:information_messages">
    <mvt:if expr="'reset your password' CIN l.settings:message">
        <p class="info-message">A link to reset your password has been sent to your email address.<br />Please wait a few minutes to check your email and click the link to reset your password.</p>
    <mvt:else>
        <p class="info-message">&mvt:message;</p>
    </mvt:if>
</mvt:foreach>

You can probably make use of some of this.

[elisabeth_hale]

Re: PR8 Update7 Forgot Password - No confirmation / validation

Thanks, Ron. I have similar code on my logn page. I was able to get a confirmation message, but can't figure out how to initiate validation as part of the Forgot password process.

[Ron Frigon]

Re: PR8 Update7 Forgot Password - No confirmation / validation

So the following is not working if you enter invalid information?

<mvt:if expr="g.Customer_Login_Invalid">
	<p class="error-message">Invalid Email Address.<br />We were unable to locate an account with that email address. Please confirm and re-enter your email address.</p>
	<mvt:item name="toolkit" param="sassign|invUser|true" />
<mvt:elseif expr="g.Customer_Password_Invalid">
	<p class="error-message">Invalid Password.<br />Please confirm and re-enter your password or click Forgot Password below.</p>
	<mvt:item name="toolkit" param="sassign|invPass|true" />
</mvt:if>
<mvt:if expr="g.Error_Messages EQ 'Customer not found'">
	<p class="error-message">Invalid Email Address.<br />We were unable to locate an account with that email address.</p>
</mvt:if>

[elisabeth_hale]

Re: PR8 Update7 Forgot Password - No confirmation / validation

It works on the login page if you put in the wrong information, but if someone tries to send a forgotten password to the wrong email address, there is no indication that that email address is not in the system. The assumption is that someone will try their email/pwd combination first and get the bad email error message, but I've had at least one customer go straight to Forgot password, and got no indication that no email was sent because it was the wrong address. Anyway, this problem will likely be rare!

[Ron Frigon]

Re: PR8 Update7 Forgot Password - No confirmation / validation

Oh, Ok, I follow you now. I was able to duplicate that in one of our stores.

If the forgot password email is not found it needs to show an error message.

I'll tinker with it and see if I can get that working.

[Ron Frigon]

Re: PR8 Update7 Forgot Password - No confirmation / validation

Well I've looked through all of the available variables. I can't seem to find one that returns anything for an email address that's not found when submitting the forgot password form.

This must be something that gets run when you submit LOGN, but not when you submit EMPW?

<mvt:if expr="g.Customer_Login_Invalid"> Seems like it should work, but it's empty.

I'm stumped.

[Rick Wilson]

Re: PR8 Update7 Forgot Password - No confirmation / validation

If the email isn't valid, you still get a message saying an email has been sent. This is specifically to prevent people from guessing the existence of an account based on only having an email address.

[Ron Frigon]

Re: PR8 Update7 Forgot Password - No confirmation / validation

Thanks Rick, That makes really good sense.

Cheers!