Increase password reset time period to 48 hours?

[criscokid]

When a user requests their password to be reset they receive a link which is only valid for 24 hours. Is it possible to increase this to a longer period of time such as 48 hours?

[criscokid]

Anyone able to answer my question?

[dcpaq2xx]

Is this possible?

Doug

[spandexman]

You have to go into the hard code. Not just the templates and ACP.

[Marco van Herwaarden]

Why do you want this? A user should be able to respond within 48 hours, and if he needs more time, he can always request a new code to be sent.

[criscokid]

At the moment when a user requests their password to be reset they receive a link which is only valid for 24 hours. Not everybody goes online everyday... and this 'too short a period of time' has resulted in more than just a few emails from irate users.

We're asking for it to be increased to at least 48 hours. P,lease put yourself in Average User Joe's shoes... I'm sure you'd be upset if you received your password reset email only to be told "sorry you've run out of time to change your password".

[spandexman]

but, I dont understand.
They go on the computer, request password, then leave for 24 hours? Why not just sit for 10 seconds more and wait for the email and validate it then? They are obviously on the computer to request so why leave it for 24 hours :S

[Marco van Herwaarden]

Originally Posted by criscokid

P,lease put yourself in Average User Joe's shoes...

Ok will do that:

• Going to visit that board today
• Open browser, type in URL
• Hmmm I must login, now what was my password again.
• Let's try, oops wrong
• Hey a lost password link, let's click that
• Fills in email address.
• Go check email and retrieve a new password

My question: Why would you wait (even 5 minutes) before using/reading that email if you are trying to login now?

[criscokid]

Originally Posted by Marco van Herwaarden

Ok will do that:[*]Fills in email address.[*]Go check email and retrieve a new password[/LIST]My question: Why would you wait (even 5 minutes) before using/reading that email if you are trying to login now?

Remember that email isn't guaranteed to ever be delivered. You're all assuming that the email is being delivered straight away... the destination mail server could be busy and throttling SMTP connections.

[dcpaq2xx]

Also who's to say that the user intitiated the password reset?

It could have been initiated by the administrator and they werent home when it was sent.

As in my case.

48 hours would be alot more ideal then 24 hours, and I wouldnt even mind changing it to 72 hours!

Thanks

Doug