Secret Questions

[michael_s]

This contribution changes the way a user accesses their account when they have forgotten their password by adding a Secret Question/Secret Answer combination and NOT sending the password via email.

When a user forgets their password and clicks on the "Forgotten Password" link, they are asked for their email address, they are then presented with the Secret Question. If they enter the correct Secret Answer, their password is reset to a random value and they receive a notice to update their password until they either reset the password or the session is destroyed.

An option has also been added so the customer can set/reset their "Secrets" from the My Account page.

This release uses a case sensitive Secret Answer and also includes 10 sample Secret Questions which are presented to the customer when they are setting/updating their Secrets. The sample Secrets are held in a database table and con be changed to suit the store owner's needs or preferences.

More...