Postnuke vs Php-Nuke? HCR auth?

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Carl Parrish
Date:  
Subject: Postnuke vs Php-Nuke? HCR auth?
I actually did do a modification for this for a client. (not sure if I
made the code generic enough but I'll check) but I don't advise this.
The problem is we assume (I'll grant this is a big one) that the site
owner is concerned that the user actually has an email address. This
process verify this. I don't think the steps are all that much more than
joining any popular mailing list for much the same reason. That said I
do agree that there should be some sort of option where the admin could
say. "verify user first" or "allow user sign up without verification",
which would work much like you say. I'll get to work on this and let
you know when I have something worth testing out.

Carl P.

On Wed, 2003-07-30 at 15:56, Don Calfa wrote:
> If you have the URL for the Weather blocks for PN, that woule be nice.
>
> The user process I find unattractive is the password process. If I knew
> PHP and MySQL, I would defintely contribute to this step
>
> 1) New user creates a username and enters a valid e-mail address.
> 2) Password is e-mailed to user.
> 3) User has to check E-mail,
> 4) revisit the site, enter the username and password. (Already too
> long of a process for most)
> 5) User has to navigate to "My Account" and "Change your info" (2
> clicks) to change the password to one that is easily remembered.
>
> If the user forgets the password, the lay person should just e-mail the
> admin for a password reset. Even I find this cumbersome and overkill
> even for a techie.
>
> 1) Click to the login page
> 2) Click on "retreive lost password"
> 3) Enter either a username or email address (nice. I like the choice)
> 4) A confirmation code is sent to the user
> 5) User has to check email
> 6) User has to re-visit the site, click on "retreive lost password"
> 7) Enter username ot email address and confirmation code
> 8) Password is sent to user
> 9) User has to check Email again and get the password
> 10) User has to revisit the site and login
> 11) User at this point needs to change their password to one that is
> easily remembered.
>
> Now most users use an email client where the the POP server is checked
> every 10 minutes. That makes this process take over 20 minutes for the
> lay person.
>
> What's wrong with the user picking their password at login and blocking
> scripts out that automatically do this?
>
> I think the layout should be changed for the "retreive lost password"
> and the link should be called "reset password"
>
>
>
> wrote:
>
> >On Tue, 2003-07-29 at 11:10, Don Calfa wrote:
> >
> >
> >>It seems to me that Postnuke is more stable-security oriented. PHPnuke
> >>does have a ton of modules and blocks that I wish Postnuke would have.
> >>
> >>
> >>One thing I like is the ability of PHPn to let the user choose their own
> >>password. PostN is too confusing for the lay person. I have quite a
> >>few users that don't know their passwords and the process is too
> >>cumbersome to retreive it.
> >>I also like the weather block for PHPn. The weather module for PostN is
> >>fine but the ability to see it as a block is better I think.
> >>
> >>
> >
> >First off I'm going to admit that PHP-Nuke does have a *lot* more
> >modules than PostNuke has. That said however I"m not sure what you mean
> >about about the password. Users are able (after logging in with a pre
> >selected passwd) to change their passwd to whatever they would like.
> >(example site is www.carlparrish.com) How would you like it to work? My
> >girlfriend agrees with you that PostNuke isn't for lay people I just
> >can't seem to get her to describe to me how she thinks it should work so
> >if you can I would appreciate it. Next there aren't as many weather mods
> >in PN as there are in PHPn however we do have a few that allows the
> >weather to be displayed in a block. If you want I can send you URLs.
> >
> >Thanks,
> >Carl nolongeractiveinpostnukebutwillingtohelpout Parrish
> >
> >
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

--
Carl Parrish ()
http://www.carlparrish.com
---
Registered Linux User #295761 http://counter.li.org