-
-
Notifications
You must be signed in to change notification settings - Fork 3.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[com_users][fix] User profil changes and password reset won't work if logout menu exists and no login menu is shown #12037
Conversation
If a logout menu item exists, users can not access to profil changes. It means that the password reset function won't work either. com_users/Router.php creates a default link index.php/logout/profile?layout=edit that won't work, it blocks profile changes button et stays on profile display form. The problem is that logout menu creates the following link : index.php?option=com_users&view=login&layout=logout&task=user.menulogout and the router just checks view=login, ignoring the view part of the link. A "cleaner" solution could be to change the logout menu to become index.php?option=com_users&view=logout. Pascal
Hi Brian, It does work because you have both login and logout menus. In my configuration, after user login, the login menu disappears (only shown if you are "invited"), so there 's only Logout Menu. In this case, you cannot access the profile changes. Pascal |
I tried again and I still cannot replicate it - see https://www.dropbox.com/s/1eqn8wwgvg6sedg/reset.mp4?dl=0 This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/12037. |
OK, one more condition: SEF mode should be ON (which is the default configuration). Pascal |
And now I can replicate the issue -thanks. Will test soon |
I have tested this item ✅ successfully on 763887b Thanks!!! This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/12037. |
I have tested this item ✅ successfully on 763887b This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12037. |
@Hackwar can you take a final look here? As this are the merge conflicts we have with 3.7.0 router changes. |
This PR does not seem to be valid anymore. The tests by @brianteeman are from before a complete rewrite of the routers. The code like this has no function right now. I did not test the whole thing, but I would be surprised if that is still an issue in the current staging. In any case, if this PR is merged in the current form, it will just create a bunch of notices and nothing more. There will be no change to the router by this. |
@pmleconte Can you have a look to see if the issue still exists in 3.7.0 and if needed update your PR? Thank you. |
If this PR get no Response, it will be closed at 23th July 2017. |
Set to "closed" on behalf of @franz-wohlkoenig by The JTracker Application at issues.joomla.org/joomla-cms/12037 |
closed as stated above. This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12037. |
Hello! O Joomla 3.8.1 I have the same problem. When i have 'logout' menu item (visible only for login user), user can't reset password. This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12037. |
@procajlok Please update on latest Release and ask further help on the forums. This repository concerns in first Place Joomla-Core coding, thanks. |
Pull Request for Issue # .
Summary of Changes
com_users/router.php
Testing Instructions
Joomla 3.6.2, no specific module/extension/plugin
Documentation Changes Required: no
If a logout menu item exists, users can not access to profil changes.
It means that the "force password reset" function won't work either.
com_users/Router.php creates a default link index.php/logout/profile?layout=edit that won't work, it blocks profile changes button et stays on profile display form.
The problem is that logout menu creates the following link :
index.php?option=com_users&view=login&layout=logout&task=user.menulogout
and the router just checks view=login, ignoring the view part of the link.
A "cleaner" solution could be to change the logout menu to become index.php?option=com_users&view=logout.
Pascal