i'm using 188.8.131.52.
Some of our users wants to reset their password. Registered members recieved there email. But if customer is not sure what is their email, they don't get any error messages.
If email is not correct, they receive the same message as it was correct. Everyone receives We have sent instruction how to reset your password to your email. If if there account is registered or not. So they are waiting for a email for a day or two and then contact us to check manualy.
We are using custom template, but phtml for reset password is from base design.
Just doublecked with path hints: frontend/base/default/template/customer/form/forgotpassword.phtml
Solved! Go to Solution.
Well, Magento doesn't send an e-mail when there's no user info in database and for a very good reason: otherwise it's very simple to generate thousands of fake password reminders. It a) spams recipients and b) may cost real money for the store. In worst case scenario it may get store blacklisted because spamming.
Thank you for your reply.
It's not the problem about receiving an email. Problem is that even if they type in the forget password field firstname.lastname@example.org they still get the message in magento that instruction has been send to your email address. They should receive a message that there is no email address in our database or something similar.
thank you for your reply.
So you are saying that this is a feature and not an error? And if i want to change that i need to make an extension for magento?
Ah, you're talking error message on screen and not-email message.
Indeed it's not a bug, but a feature -- call it first line of security. Basically all system that have been paying even marginally attention what is going on will use this approach: you don't want hackers to know if the account exists or not just by saying so -- you can brute force non-existing account as long as you want and never get in. By saying that it's an existing account you make attacking your server easier. Not just easier -- easier by orders of magnitudes.