Password reminders not working

[Kian]

Hello

 

I tryed hard to understand what is the problem with password reminder function with no success.

 

1-Click on Request a Password Reset then i type my email address and a message notify me "Validation Email Sent "

2-I receive email with temporary link to reset my password. I click it

3-I'm redirected to my website then a message notify me

Password Reset Successful

 

Your password has now been reset and the new login details emailed to you.[/b]

4-I receive email with new password automatically generated

 

Here is the problem. I can't login with this password --> Login Details Incorrect. Please try again.

 

What?

 

Note: if i send manually password reminder i receive a totally different password. So after password reset i've TWO different password and no one of them is valid. I can't even change password manually. All password i save are invalid on login. I have no idea of what is going on. I'm using MD5 password and i've also tryed disabling password strength check.

Edited December 10, 2009 by Kian

[Kian]

I think that i've found the problem in MD5 fields.

 

This is "hhhhhh" password crypted

28b3948d9645878701187a50c7ebe380:uxhO#

And this "yyyyyy"

4617a15f70bbf3daa3553072030c8e2f:TxKPY

 

What is the part after :? Is it normal?

 

Edit: i'm goint to submit a ticket in support because it's a critical situation... nobody can do a login and i can do nothing to fix the problem

Edited December 10, 2009 by Kian

[sparky]

The part after the : is normal

It is part of the salt for the encryption

[daferub]

Hello,

 

On the Client Summary page, when the admin send an email with Password Reset Validation, it has been sent, but without the link where the user would click and may change your password.

 

I checked in email templates if the link is missing, but I the link.

 

Any idea? Thank you all!