Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

  • Lesley 89 posts 329 karma points
    Apr 17, 2018 @ 02:12

    MembersMembershipProvider.ValidateUser always returns false and locks out member

    We have a Change Password form on our website where an Umbraco Member can change their password by entering their current password and a new password.

    If I use Services.MemberService.SavePassword(member, newPassword) I can update the member's password, but this doesn't check that the current password they entered is valid.

    If I use MembersMembershipProvider.ChangePassword(username, currentPassword, newPassword) I can change the password, but again this doesn't check that the current password they entered is valid - possibly because allowManuallyChangingPassword="true" in web.config (I need this set to true to allow users to reset their passwords if they forget their current password)

    I've tried using MembersMembershipProvider.ValidateUser(username, currentPassword) to validate the current password, but this always returns false, and appears to set the IsLockedOut flag.

    How can I implement Change Password whilst validating that they have provided the correct value for current password?

Please Sign in or register to post replies

Write your reply to: