Simplify User Password Reset

This thread is resolved. Here is a description of the problem and solution.

Problem: I would like to allow my site admins to reset a User's password and trigger the password reset email that is normally triggered from the Reset Password form.

Solution: I do not know a way to bypass the step completely, but you can transfer the step from the end User to a site admin. Show those site admins a link to @http://yoursite.com/wp-login.php?action=lostpassword, where they can fill in the User's credentials for them and submit the form.

This support ticket is created 6 years, 8 months ago. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

Sun	Mon	Tue	Wed	Thu	Fri	Sat
8:00 – 12:00	8:00 – 12:00	8:00 – 12:00	8:00 – 12:00	8:00 – 12:00	-	-
13:00 – 17:00	13:00 – 17:00	13:00 – 17:00	13:00 – 17:00	13:00 – 17:00	-	-

Supporter timezone: America/New_York (GMT-04:00)

Tagged: Toolset Forms, User-registration forms

This topic contains 3 replies, has 2 voices.

Last updated by Christian Cox 6 years, 8 months ago.

Assisted by: Christian Cox.

Author

Posts

March 31, 2018 at 10:45 am #630276

Adrian

Hi,

i am trying to reset a user's password in a secure manner using a form.
We are using CRED forms to give a team of "soft admins" access to some predefined functions.

Right now The Edit user form says it will generate a new password, but instead sends the link to the password reset page, not even the password reset link itself. Is there a way to make this process a little less a** backwards?

Thank you

April 1, 2018 at 8:56 pm #630412

Christian Cox

Hi, what about the wpv-reset-password-form shortcode? You could eliminate the need for a soft admin to handle this part of the process and give Users the ability to reset their password on their own. Direct or link Users to a custom page with the wpv-reset-password-form shortcode in the page content. The User can handle the reset on their own without any need for a soft admin. Let me know if I've misunderstood the request.

April 2, 2018 at 3:54 pm #630626

Adrian

I do understand it, but in some cases (more than you'd expect) I find a lot of less technical users require this. I myself as a developer get this question at least once from clients and I have to tell them there is a link there, then they have to click it and it's an entire process.

The only shortcode i have sends them a link to the password reset form, which is cool but requires that extra step where they have to enter their email or username. Since I know both, I'd like to submit the next bit, which is the nonce link to the user so they just click it, pick a new password then done. Instead of click the link fill in the email wait for another email then reset the password.

To be honest that's what I was expecting CRED to send when I saw the %%USER_PASSWORD%% field in the available variables for emails.

April 2, 2018 at 7:21 pm #630679

Christian Cox

I don't have a shortcode that will bypass the extra step, but you could give the extra step to the soft admins instead of the end User. The form at hidden link could work. Show soft admins a link to this page somewhere. Your soft admins can fill in the end User's Username or Email Address, and click "Get New Password". That will send the email including the nonce, and the end User can immediately reset their password.