XF 2.1 prohibit changing password

[pupu]

hello everyone
how to disable password change and recover password.

 

[djbaxter]

Why on earth would you (or anyone) want to do this?

 

[PlayerOne]

An example of why would be when all password management is handled by a main web site, and not by the forums. We have the same question.

 

[Paul B]

It would require custom development to do it properly.

You could hack it by editing various templates and making certain pages unavailable.

 

[RallyFan]

An example of why would be when all password management is handled by a main web site, and not by the forums. We have the same question.

You might be able to use a workaround under ACP > Setup > Options > User Options > Minimum time between lost password requests (in seconds).

Just tested on my installation and maximum I could set (after putting in 99999999999999999999999999999999999999999999999) was 9.2233720368547758e+18.

Now I'm assuming that might not work (or default to 9.2 seconds), so I tried another approach in using "3153600000" seconds. That was accepted fine.

If my maths isn't stuffed (and it's possible it is).

3153600000 seconds / 60 = 52560000 minutes
52560000 minutes / 60 = 87600 hours
87600 hours / 24 = 36500 days
36500 days / 365 = 100 years

So 100 years between lost password requests (which might also mean the ability to reset a password)..

 

[PlayerOne]

Wouldn't the above just prevent someone from trying to change their password a second time?

When I get a chance I'll try and fix this correctly. In the meantime, while I won't actually block the form or process, I can at least hide-it. In case it is helpful to someone else...

edit template: lost_password
I kept the title and head alone, but removed the <xf:form> … </xf:form> section and replaced them with css unfriendly (it doesn't matter on the popup for now):

<center>
<br><br>If you have forgotten your password, you can go to the logon page on the main site to request a new password.<br>
<br><br><a href="https://www.x.com/accounts/">https://www.x.com/accounts</a><br><br>
</center>

 

[RallyFan]

If you are using a bridge it shouldn't be a problem though as SSO is used.