How can add Secret question & answer filed in Request new password page

By govind123 on 9 Jan 2008 at 07:15 UTC

Hi,

I have added the Secret question & answer field in registration page using profile module. I want to add same thing in Request new password page. How can I do this?

Any separate function to alter the user_pass() function?

Thanks
Govind

Comments

Password reset module

Christefano-oldaccount commented 9 January 2008 at 07:38

There's a Password reset module for that.

Hi, Thanks for your reply.

govind123 commented 9 January 2008 at 09:36

Hi,

Thanks for your reply. The given module is good. However, I have secret question filed in registration page with using profile fields. The given module asking new secret question. Either I want to integrate profile fields in to request new password page or integrate password reset fields into registration page.

If you have any idea about this issue, please help me

Thanks
Govind

The Password reset module

Christefano-oldaccount commented 9 January 2008 at 11:15

The Password reset module already integrates into the user registration process.

Do you have users who have already filled out the security question and answer fields in their profiles? If so, I can understand why you want Password reset to read the custom profile fields. Personally, I believe that allowing users to set their own security questions is bad practice (there was a discussion about this a few years ago in the Web Application Security mailing list). Basically, if you allow a user to set the security question to something like "what's your favorite color" then there's a statistically high probability that "blue" is going to be the answer.