• Login
  • Register

DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

Better support for users changing their password

You are not authorized to post a reply.
Sort:


New Member


Posts:2
New Member

    I'm running DNN Platform 9.9.1, maintain 30 different portals, and have ~4,000 users.  I often see users struggle with changing their password.  I've updated the error message (in the language resources) so that it identifies the custom password rules we have.  Regardless, some users still have problems and there's little useful information that DNN provides to the user to help them figure out the issue.  It could be a case of them trying a password that fails the rules, or they're using an invalid username, or they're using a password that has been previously used.  Whatever the issue, DNN provides the same basic error message.  This can get aggravating for users. 

    Are there ways to alleviate some of these issues?  From a user's perspective, having better error messages would be useful (e.g. sorry that password violates doesn't conform to our password rules, sorry you've used that password recently please try another, sorry that username doesn't exist). 

    I could see, though, that a security expert might balk at more in depth error messages because it might help a hacker in some fashion. 

    Another approach would be to provide different errors in the EventLog table (within the DNN database).  This way an Admin can see what the issue is.  As it is right now, all of these forms of failed logins result in a FAILED LOGIN code.

    Regards.



    Veteran Member


    Posts:385
    Veteran Member

      please post your issue into the public issue tracker at https://github.com/dnnsoftware/Dnn.Platform/issues/
      However, DNN is a community project and it will require a volunteer to pick it up and fix it or someone to sponsor development.


      New Member


      Posts:2
      New Member

        A new issue has been submitted on GitHub.

        Thanks.

        You are not authorized to post a reply.

        These Forums are dedicated to discussion of DNN Platform.

        For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

        1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
        2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
        3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
        4. No Flaming or Trolling.
        5. No Profanity, Racism, or Prejudice.
        6. Site Moderators have the final word on approving / removing a thread or post or comment.
        7. English language posting only, please.

        Would you like to help us?

        Awesome! Simply post in the forums using the link below and we'll get you started.

        Get Involved