Problems logging in after "Forgotten Password"

[rkcripps]

When a user clicks on the "forgotten password" link, their password is reset and an email is sent with the new password. This is good; It should work this way.

 

The problems start when the user attempts to sign in with the new password. If the user enters the password exactly as it appears in the email message, then the warning: "Error: No match for E-Mail Address and/or Password" is displayed.

 

But if the user cuts and pastes the new password from the email, then they are signed in. Subsequent attempts to sign in work the same way.

 

The email with the new password is sent in plain text format.

 

This is NOT the way it should work. Does anybody have any suggestions?

[lian8]

When a user clicks on the "forgotten password" link, their password is reset and an email is sent with the new password. This is good; It should work this way.

 

The problems start when the user attempts to sign in with the new password. If the user enters the password exactly as it appears in the email message, then the warning: "Error: No match for E-Mail Address and/or Password" is displayed.

 

But if the user cuts and pastes the new password from the email, then they are signed in. Subsequent attempts to sign in work the same way.

 

The email with the new password is sent in plain text format.

 

This is NOT the way it should work. Does anybody have any suggestions?

 

 

I have the same problem. In the email, the new password sent has only 5 characters visible. There is some space before the first character. Therefore, when I do a cut and paste (which includes the space), the password pasted has more than 5 characters. That's why if I type in the new password instead of doing a cut and paste from the email, the error message is displayed.

Can anyone figure this out?