Hello!

Finally, I was challenged to write decent code to handle a password update/reset and had a free evening yesterday to do just that!

Before:

Manually update the password in the SQL dabatase and store it un-encrypted.
This will make the Forum account out of sync.
Ask the user to log in with the temporary password and update it again to re-synchronize Account + Forum.

Problem: almost nobody sets a new password to resync the account, leaving the password in clear in the database and generating logon errors on the Forum.

After:

One click, popup for a new value from the Admin interface.
Password encrypted directly.
Password + Forum account is re-sync'ed.
No need to ask the user to update the password again.
Notification Email automatically sent.

Planned:

Re-use this code to let users request a password reset with email confirmation.

Julien