alexweissman/UserFrosting — pull request #51 by lilfade (2014-06-09 05:11:57+00:00)
Title: Forgot Password Updates

Changed the forgot_password.php file alot to hold 2 different forms to keep files down, in user_reset_password.php there was mainly changes made to the confirm code to make it not send the user a new password but rather direct them back to our website and then we do a few things:

>we set a new activation token for the user, we then send the user a email with the activation token for the user to reset the password, when the user gets the email and clicks the link we check to see if the token is valid then we check to make sure that it hasent passed our token_timeout variable to make sure its still "live" if thats all good we make sure the username matches and if all that works out we allow the user to update the password to the new password.