I'm having problems with the Request New Password form.
When a user requests a new password from the form, he receives an email with replacement login information and a reset URL. the URL brings the user to a form to change his password; however, the form requires the user to enter his current password. Since the user does not know his current password, he cannot enter a new password.
Also, another bit of information that may or may not be related: When the Admin trys to cancel an account through the administration menu, a message “you are not authorized to access this page” is displayed and the account is not cancelled.
Thanks in advance for help.
Read »
