Recover Password Feature Flawed

Store Builder Feedback
1

Let me put in my wishes as well here and they should have been implemented well before V4.3.x at any rate.

My beef with CS Cart is the not very intuitive approach for customers when they wish to reset their password. It goes wrong in my opinion and that of my customers when they receive an e-mail from the store to reset their password and they are directed to their

account page where you will see your account details and the password input box being filled with 6 or more asterix. It is very unclear now for many what to do now.

Step one when you do a an intial password recovery

[attachment=11523:step1-passwordrecov.jpg]

Step two you receive an email

Please follow this link to confirm your password recovery procedure:

http://yourstoreurl.com/index.php?dispatch=auth.recover_password&ekey=yourencryptedpassrecovkey

Thank you for your purchases at Pasio Ingredients

You click on the recovery url and that brings you back to the store

Step three

[attachment=11524:step3-passwordrecov.jpg]

But what then ?? does this screen tell you what to do next ?? A layperson not familiar with the quirks by CS Cart would not now what to do next.

This needs to be resolved before any upcoming release in my honest opinion.

step1-passwordrecov.jpg

step3-passwordrecov.jpg

2

You should see the following notification after the recover password request is posted

http://prntscr.com/c6rht6
3

You should see the following notification after the recover password request is posted

Yes we know about this notification but that notification brings you back to the store and

brings you back to the store as seen below

[attachment=11526:step3-passwordrecov.jpg]

But what then ?? I know because I am savvy customer know what to do but many of my customers do not.

Magento does this better, it gives you instructions on the page itself on what to do next.

The e-mail that is sent just says this

Please follow this link to confirm your password recovery procedure:

http://ourstoreurl.com/index.php?dispatch=auth.recover_password&ekey=a073ca3c2c74920b875f2e4a90cf2697

Thank you for your purchases at (name of our store)

Are you implying that I should add instructions myself in this email and why is it not hard wired into the store itself like Magento ?

step3-passwordrecov.jpg

4

You can extend notification text in the translations. As alternative, open the app/controllers/common/auth.php and add

if (AREA == 'C') {
    return array(CONTROLLER_STATUS_REDIRECT, 'pages.view?page_id=123');
}

after the following code:

        if (!fn_recover_password_generate_key($user_email)) {
            $redirect_url = "auth.recover_password";
        }

where 123 - is the ID of the required CMS page ID with instructions

(!) Not tested

5

whats wrong with this

http://prntscr.com/c6xqjb

6

Thank you you both, my customers must have overlooked this notification like myself. It is however not clearly visible and as said this notification is often overlooked. A popup message would be better or still the way Magento has implemented it.

7

On return you can add additional parameter to the URL. E.g. open the app/controllers/common/auth.php file and replace:

$redirect_url = "profiles.update?user_id=$result";

with

$redirect_url = "profiles.update?user_id=$result&show_instructions=true";

Then add HTML block with SMARTY support and the following condition:

{if $smarty.request.show_instructions}
    ... INSTRUCTIONS HERE ...
{/if}
8

Thank you you both, my customers must have overlooked this notification like myself. It is however not clearly visible and as said this notification is often overlooked. A popup message would be better or still the way Magento has implemented it.

Or you can change the size and position of the box via css and make it stay on till crossed off