?
avatar BastianWie
BastianWie
4 Apr 2017

Actual result

If you are using Joomla with an LDAP implementation you do not need the "Forgot your password" or "forgot your username". However its not possible to disable these features without doing a "hack" which might cause security issues as the modules aren´t then updated. There seamed to be huge need as you can find multiple handouts in the internet how to do that with an "hack".

Expected result

The expected result would be if we can disable these features either in:

  • Users: Options
  • Login Module
  • Link to the Login Module

Votes

# of Users Experiencing Issue
1/1
Average Importance Score
5.00

avatar BastianWie BastianWie - open - 4 Apr 2017
avatar joomla-cms-bot joomla-cms-bot - labeled - 4 Apr 2017
avatar brianteeman
brianteeman - comment - 4 Apr 2017

You don't need a hack. Just do a regular override in your template

avatar zero-24
zero-24 - comment - 4 Apr 2017

you can take a look here:
https://www.j-over.de/en/overrides/mod_login/login-module-without-links.html
https://www.j-over.de/en/overrides/com_users/login-component-without-links.html

Where i have documented the needed things about the overrides. (wich is not a hack ;))

avatar franz-wohlkoenig franz-wohlkoenig - change - 4 Apr 2017
Priority Medium Very low
Status New Confirmed
avatar BastianWie BastianWie - edited - 4 Apr 2017
avatar BastianWie
BastianWie - comment - 4 Apr 2017

Maybe I wasn´t clear here. I´m not searching for a way to hide the visible appearance from the links. I´m searching for a way to BLOCK this feature so that a bot isn´t able to put in random email addresses or usernames. Removing the visual appearance from the links will not help here :). The issue is that on some of my joomla installations the users got a VERY large amount of "do you wish to reset your password" emails due to the reason that some spam bots try multiple email address combinations into the fields.

The only way to stop that is to remove this feature :)

avatar brianteeman
brianteeman - comment - 4 Apr 2017

Even if a bot tries a large number of times to guess an email address there is nothing in Joomla core that will send out a "do you wish to reset your password" email

avatar brianteeman
brianteeman - comment - 21 May 2017

I am closing this as the main issue reported being

on some of my joomla installations the users got a VERY large amount of "do you wish to reset your password" emails due to the reason that some spam bots try multiple email address combinations into the fields.
and as stated there is nothing in the joomla core that will do this

avatar brianteeman brianteeman - change - 21 May 2017
Title
Feature request: Allow to hide the "Forgot your password?" link
Feature request: Remove the "Forgot your password?" link via GUI
Status Confirmed Closed
Closed_Date 0000-00-00 00:00:00 2017-05-21 14:44:24
Closed_By brianteeman
avatar brianteeman brianteeman - close - 21 May 2017

Add a Comment

Login with GitHub to post a comment