Error message after Forgotten Password email

[hairydog]

If a customer forgets their password, they go to the Forgotten Password page, enter their email address and the system sends them an email with a new password.

The then go to the Login page, where they use the new password to log in. That works just fine. But at that point, the login page takes them back to where they were before (which is what is wanted most of the time).

But their previous page was the Forgotten Password page, which has a security token for the old username/password pair. So it generates an error message.

I think the best solution to this problem is to make the Forgotten Password page send the user to the home page and/or clear the security token. But I don't know how to do that. Any suggestions?

Iain

[wilt]

Hi,

Which version of Zen Cart are you using.

[hairydog]

Well, as far as I'm concerned, it is 1.3.8, but the about says it is 1.3.7.1. I'm not sure why. It is possible that this site missed an update, but I doubt it.

[wilt]

k,

look in includes/modules/pages/login/header_php.php

around about line 96 you should have

      if (sizeof($_SESSION['navigation']->snapshot) > 0) {
        //    $back = sizeof($_SESSION['navigation']->path)-2;
        //if (isset($_SESSION['navigation']->path[$back]['page'])) {
        //    if (sizeof($_SESSION['navigation']->path)-2 > 0) {
        $origin_href = zen_href_link($_SESSION['navigation']->snapshot['page'], zen_array_to_string($_SESSION['navigation']->snapshot['get'], array(zen_session_name())), $_SESSION['navigation']->snapshot['mode']);
        //            $origin_href = zen_back_link_only(true);
        $_SESSION['navigation']->clear_snapshot();
        zen_redirect($origin_href);
      } else {
        zen_redirect(zen_href_link(FILENAME_DEFAULT));
      } 

please confirm

[wilt]

Just a note as well.

When you login, it does not send you to the page you came from

It sends you to the last page a 'snapshot' was made.

Only some pages create a snapshot, mainly pages that you need to be logged in to view, such as My Account.

Password Forgotten DOES NOT set a snapshot, so should never be redirected to from login

[hairydog]

The code in question seems to be:

      if (sizeof($_SESSION['navigation']->snapshot) > 0) {
        //    $back = sizeof($_SESSION['navigation']->path)-2;
        //if (isset($_SESSION['navigation']->path[$back]['page'])) {
        //    if (sizeof($_SESSION['navigation']->path)-2 > 0) {
        $origin_href = zen_href_link($_SESSION['navigation']->snapshot['page'], zen_array_to_string($_SESSION['navigation']->snapshot['get'], array(zen_session_name())), $_SESSION['navigation']->snapshot['mode']);
        //            $origin_href = zen_back_link_only(true);
        $_SESSION['navigation']->clear_snapshot();
        zen_redirect($origin_href);
      } else {
        zen_redirect(zen_href_link(FILENAME_DEFAULT));
      } 

Seems to be identical, so I'm not sure why it acts as it does