Recover login details by email

[orschiro]

Hi,

Why is this not possible?

This is pretty much standard these days.

I don't know any other system where this is not possible.

https://docs.joomla.org/How_do_you_recover_or_reset_your_admin_password%3F

[Hackwar]

Because if you are an admin, you have other possibilities to do this, for example going into the database directly. At the same time, it is a security issue if you can simply reset the password as super admin when someone got access to your mail account.

[orschiro]

Thanks, Hannes! But what about non-super admin users?

…

On Wed, 11 Dec 2024 at 09:34, Hannes Papenberg ***@***.***> wrote: Because if you are an admin, you have other possibilities to do this, for example going into the database directly. At the same time, it is a security issue if you can simply reset the password as super admin when someone got access to your mail account. — Reply to this email directly, view it on GitHub <#44603 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABJXQYYNY4SOUZ3RU4R4532E72KXAVCNFSM6AAAAABTM5JFA6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCNJTGAYTSOI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[Hackwar]

Those can do that over the frontend login screen.

[orschiro]

Can you pass me the link to the frontend login screen? Thank you!

…

On Wed, 11 Dec 2024 at 09:37, Hannes Papenberg ***@***.***> wrote: Those can do that over the frontend login screen. — Reply to this email directly, view it on GitHub <#44603 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABJXQ3JE2RDMXCGHNJX6YD2E72WHAVCNFSM6AAAAABTM5JFA6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCNJTGAZDEOI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[Fedik]

Check for the login form on the site, there should be a link to recovery.
If it does not exist, then please contact to administrator of your site (user who is super admin on your site).

[orschiro]

I only know one login form: website.com/administrator

This is what we use as admins.

Is this the same for non-admins?

[Fedik]

Yes, /administrator can be used by people who allowed to login in Admin section.
You better contact to the administrator of your site

[orschiro]

That's my point. If a normal author (non admin) can sign in via /administrator but forgot his password, there should be an option for him to restore his password via email.

…

On Thu, 12 Dec 2024 at 09:29, Fedir Zinchuk ***@***.***> wrote: Yes, /administrator can be used by people who allowed to login in Admin section. You better contact to the administrator of your site — Reply to this email directly, view it on GitHub <#44603 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABJXQ4PNIXUM2CTSDQJ7532FFCNJAVCNFSM6AAAAABTM5JFA6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCNJUGE2TQMY> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[Fedik]

I agree