Users can change their own passwords, the process involves filling out a form with their existing password, creating a new password and repeating the new password (for confirmation)
Like all the other user functions, web/users/index.php can be used to run the function, for convenience web/users/change_password.php can be used to show the form.
It is assumed that you will want to tie this functionality into an existing web page the form variables for doing so are listed here.
The url the form is posted to is web/users/index.php
Note that the only accepted method is POST. (for security reasons)
Table 5-2. Form variables for password change
| Form Variable | Label |
What it does | ||
|---|---|---|---|---|
| PASSWORD | Password |
Provides existing password. | ||
| NEW_PASS | New Password |
Revised password | ||
| CONFIRM_PASS | Password Confirm |
Confirmation | ||
| DO_CHANGE_PASSWORD |
Hidden, action directive | |||
| LOCATION |
Optional, redirection url. | |||
![]() | The screen that is shown after a password change isn't very nice looking. In most cases the user should be directed back to what they were doing in the first place. You can supply a hidden LOCATION form variable to a url you would prefer them to be directed to. |