Rework password reset system to do away with the second email and instead

just allow the user (providing they possess a valid token from the first
email) to enter a new password on the site.
This commit is contained in:
Tom Hughes 2009-08-03 23:42:29 +00:00
parent 72402ebc3e
commit e890528aac
6 changed files with 40 additions and 39 deletions

View file

@ -0,0 +1,14 @@
<h1><%= t 'user.reset_password.heading' %></h1>
<%= error_messages_for :user %>
<% form_tag do %>
<%= hidden_field_tag(:token, params[:token]) %>
<table id="loginForm">
<tr><td class="fieldName"><%= t 'user.reset_password.password' %></td><td><%= password_field(:user, :pass_crypt,{:size => 30, :maxlength => 255, :tabindex => 4}) %></td></tr>
<tr><td class="fieldName"><%= t 'user.reset_password.confirm password' %></td><td><%= password_field(:user, :pass_crypt_confirmation,{:size => 30, :maxlength => 255, :tabindex => 5}) %></td></tr>
<tr><td colspan=2>&nbsp;<!--vertical spacer--></td></tr>
<tr><td></td><td align=right><input type="submit" value="<%= t'user.reset_password.reset' %>" tabindex="6"></td></tr>
</table>
<% end %>