Change Password. Is this a bug or feature.

Ok, does this happen to everyone else, or just my site.

Edit profile. (pedit.php)

Change password.

Says profile info saved, still appears as if your logged in, but go to any other page, and your no longer online.

Now this could prove to be a problem for facebook connect modules that are able to redirect to pedit after joining. Even the new boonex version does this now.

But if a new member changes the password there, they are no longer online. So this will most likely cause some confusion.

Can anyone else verify this?

Yes, After password changed via Profile Edit, then clicking on any other page, you are no longer loged in and have to re-login.

Same thing on Boonex.us

i would consider this to be a feature, as if you are changing your password, then you have lost the association with the current cookie.

so if you login and then change your password, yes, you should appear as logged out across the board. deano, i think this would relate to the online setting timer increment, where even though you are logged out, you show as being logged for x seconds after you have logged out. silly option for showing logged in members i would say, but thats the methodology we have to work with.

I am pretty sure that is how it is supposed to work. It works like that on my site as well. If you are wanting to change your password...shouldn't you be required to login again using the new credentials? It only makes sense to me to have it as so.

Well, they could at least display a better message if the password is changed letting people know they have to log back in.

I would prefer the cookie get reset after so members don't have to log back in.

Perhaps they should fix it. If they want it to be this way, then if the password is changed, the member should be informed they have to log back in, and redirected to member.php so they can.

Instead of sitting on the pedit page as if they are still logged in.

I don't know, i just find it confusing.

deano,

from my experience on many sites, not dolphin related, that is how it is there as well. if you change your password, you are no longer logged in with those credentials, and there is no way to acquire the new login credentials on the current cookie. i think even if a stored cookie were not involved, you would still need to login. there are several reasons for that from the dolphin perspective, as you know one of them would be membership level access.

i would consider that because these logins are cookie based, and this is a security feature of course or is supposed to be.

i really dont like the fb login option, or fb account creation option, because to me it mucks up the database with the character strings, and doesnt fully adhere to the admins registration requirements when using the fb connect option.

i hardly ever had to login again after changing my psw. on a webbsite...  i agree with D. it is confusing and a bit irritating

I agree...I haven't really come across many sites that can manage to maintain a cookie stored password...then let you change it and it update the cookie all in the same session.

I will agree though...that a message should come up after it says settings have been saved that states Please login with your new password to confirm change...or something to that effect.

Deano...idea for another mod? Possibly?