Go to user side of any Joomla website
Go to Login page
Click on "Forgot Password" link
Enter your "Email Address" in the given text box and click "Submit"
Now, go to admin side and login as admin
Go to User Manager and search for the user for which "Forgot Password" is attempted
Check the user state - it shows "x" under the "Activated" column i.e Deactivated.
User should not get deactivated, only by attempting the "Forgot Password" action. Unless the password is not reset, till then user should state should be activated and should be able to access the website.
User should is getting deactivated, only by attempting the "Forgot Password" action.
OS: Ubuntu 18.04 LTS
PHP Version: 7.1
Browser: Chrome
Joomla Version - 3.9.12
Status | New | ⇒ | Duplicate Report |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2019-10-18 14:09:04 |
Closed_By | ⇒ | Quy |
Duplicate #24269. Please test PR #24461, but it is for J4 and will not be fixed in J3.
It’s a display issue, the account isn’t actually deactivated. I’m pretty sure this conversation was had before here on GitHub but basically the token is stored in the database in the same column as the activation token so the UI can’t distinguish the state/intent.