Password resetting (pwreset.php) form out of whmcs?

[ooztumer]

Hello,

 

I was trying to send password reset form out of whmcs domain (I put login and password recovery forms on another site) but i couldnt do that, this method redirects to whmcs main page:

 

<form name="sifreform" method="post" action="http://domain-to-whmcs-main/pwreset.php">

<label>E-Mail</label>

<input type="text" name="email" />

<input type="hidden" name="action" value="reset" />

<br />

<a onclick="document.sifreform.submit();" class="btn btn_red">Reset Password</a>

</form>

 

Do I need to sth else?

[ooztumer]

No one ?

[WHMCS John]

Hi,

This isn't likely to work, but you could try disabling CSRF Tokens under Setup > general Settings > Security tab, and that may help.

 

The most secure option would be to just link to the pwreset.php page directly.