?
avatar PhilETaylor
PhilETaylor
3 May 2017

Steps to reproduce the issue

go to /administrator/

Click Forgot your username?
Click Forgot your password?

http://joomla4/administrator/index.php?option=com_users&view=remind
http://joomla4/administrator/index.php?option=com_users&view=reset

Expected result

These links should go to somewhere.

Actual result

Links reload the administrator login page

Additional comments

Note that SUPER ADMINS cannot change their password using online forms, on the frontend they get told to contact another super admin or use another method - so there is probably no point in these being here after all.

avatar PhilETaylor PhilETaylor - open - 3 May 2017
avatar joomla-cms-bot joomla-cms-bot - change - 3 May 2017
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 3 May 2017
avatar brianteeman
brianteeman - comment - 3 May 2017

More than super admins use the admin ui ;)

What you are seeing is a bug/rtegression

In 3.7 the links are to the frontend (ie without /administrator/ in the url

avatar PhilETaylor
PhilETaylor - comment - 3 May 2017

Cool - still a bug then ? )

avatar franz-wohlkoenig franz-wohlkoenig - change - 3 May 2017
Status New Discussion
avatar franz-wohlkoenig franz-wohlkoenig - change - 3 May 2017
Category Authentication Templates (admin)
avatar C-Lodder
C-Lodder - comment - 4 May 2017

Possible problem with JRoute? Looking at the class, there doesn't appear to be a function parameter allowing you to force the client.

avatar zero-24
zero-24 - comment - 4 May 2017

What about removing that links?

avatar C-Lodder
C-Lodder - comment - 4 May 2017

@zero-24 any reason why?

avatar C-Lodder
C-Lodder - comment - 4 May 2017

balls to it...tried to fix but beyond my PHP knowledge :(

avatar joomdonation
joomdonation - comment - 4 May 2017

@C-Lodder Don't use JRoute::_ for the links. Just use the same code as in Joomla 3.7 and it should work OK https://github.com/joomla/joomla-cms/blob/staging/administrator/modules/mod_login/tmpl/default.php#L33

avatar C-Lodder
C-Lodder - comment - 4 May 2017

Missed that.

Anyway here's the PR: #15816

avatar zero-24
zero-24 - comment - 4 May 2017

any reason why?

I could ask the same question ;P Why do you think we need it there?

avatar C-Lodder
C-Lodder - comment - 4 May 2017

Why do you think we need it there?

Simple.

If the user has forgotten their username/password, they then have to navigate to the frontend, baring in mind not all sites have a login form on the homepage of their site. I've seen many client sites that have a login form only on some deeply nested menu item

So removing it just make life harder.

avatar zero-24
zero-24 - comment - 4 May 2017

Hmm. I have been a few years in the forums and i never saw the request "i 'm the site admin and i don't remember my username" the pw thing also just work for non super admins so not that better i think.

avatar C-Lodder
C-Lodder - comment - 4 May 2017

Could be a matter of one of the admins/publishers/managers etc taking time off for a while and coming back at a much later date. Could be an extremely forgetful individual. You just never know :)

avatar zero-24
zero-24 - comment - 4 May 2017

This is the only argument for adding it?

avatar C-Lodder
C-Lodder - comment - 4 May 2017

I'll reverse it and ask what your arguments for removing it are :)

avatar zero-24
zero-24 - comment - 4 May 2017
  • there was never a request nor a need for that in the past
  • it does not work for superadmins (and the most users are superadmins)
  • i don't see the need for 2 extra links that are just confusing for newcomers
  • if we go by your argument (long away from the webseite) the account should be deactivated and the site admin should be contacted anyway.
  • if we go by your argument again we should also link the docs Artikels what is joomla and how to login to joomla
  • if your site really need this just override and show it.
  • please remember that the most sites just have one or two superadmins so this don't work anyway.
avatar C-Lodder
C-Lodder - comment - 4 May 2017

the account should be deactivated and the site admin should be contacted anyway.

should is correct, but it's not up to us to tell users how to manage their site or users.

I know of sites that have several standard admins and publishers, not just super admins.

At the end of the day, it's a small feature making it easier to reset a password or get a forgotten username. Not hurting anyone, nor is it a security issue.

avatar zero-24
zero-24 - comment - 4 May 2017

nor is it a security issue.

i have not wrote that ;)

avatar C-Lodder
C-Lodder - comment - 4 May 2017

Yeah I know, just pointing it out though :)

avatar wilsonge
wilsonge - comment - 29 May 2017

#15816 got merged so I'm going to close this

avatar wilsonge wilsonge - change - 29 May 2017
Status Discussion Closed
Closed_Date 0000-00-00 00:00:00 2017-05-29 16:38:51
Closed_By wilsonge
avatar wilsonge wilsonge - close - 29 May 2017

Add a Comment

Login with GitHub to post a comment