User Form: Send welcome email, Force password change [done]

[nc07]

I suggest that PHP code before save could be enhanced. Example, if a new user is registered, after the password validation, and email is sent to the newly registered email address with the login details with the site link.

This can be achieved by developers however issue of after update will remain.

Regards
Nilesh

[kev1n]

In my view, the optimal procedure for user creation involves sending a time-limited, one-time password (OTP) to the user, which they must update during their initial login.
Nonetheless, the solution needs to offer flexibility, because you may not want an email to be triggered in every case or send the email in various languages etc.
For ultimate flexibility, a PHP procedure could be executed after a user is created. This procedure would allow you to define the email-sending logic.

Example email:

Subject: Welcome to [Your Platform] - Temporary OTP Password

Dear [User's Name],

Welcome to [Your Platform]! For security reasons, this OTP is valid for a limited time and should be changed upon your first login. Here are the steps to get started:


1. Visit [Platform URL] to access the login page.

2. Enter your Username: [Username here].

3. Use the provided temporary OTP [OTP here] as your password.

4. Once logged in, you will be prompted to create a new, more secure password. Please make sure your new password adheres to our security requirements, which include a combination of uppercase letters, lowercase letters, numbers, and special characters.

5. Follow the on-screen instructions to set your new password.

Please note that the temporary OTP will expire in [OTP Expiry Time] minutes, so we recommend completing the password change process as soon as possible. If you do not use the OTP within this time frame, you can request a new one by visiting the login page and clicking on the "Resend OTP" option.

Best regards,
Administrator

[nc07]

Yes Kevin,

I agree with you, PHP procedure would be optimal for this and developers can modify according to their needs.

regards
Nilesh

[kev1n]

I would suggest the following changes:

Upon user creation, a default setting is applied: the "User must change password at next logon".
This setting is optional, and the admin has the choice to uncheck it, thereby avoiding the obligation to change the password.

There would also be a checkbox labeled "Send login details by email." Enabling this checkbox will trigger the sending of a "welcome email," as described previously.

Subsequently, when a user attempts to log in, a password change dialog will be presented. Following a successful password change, the "User must change password at next logon" flag is promptly removed from the database. At this point, the user gains access to other forms and functionalities within the system.

Does this make sense to you?

[nc07]

Thanks Kevin,

That totally makes sense and the additional options that you have mentioned is a great idea.

[kev1n]

It's on Github. Please test.

user_options.png

Upon user creation, a default setting is applied: the "User must change password at next logon".
There ist also be a checkbox labeled "Send welcome email". Enabling this checkbox will trigger the sending of a "welcome email" (using a default email template)

Subsequently, when a user attempts to log in, a password change dialog will be presented. Following a successful password change, the "User must change password at next logon" flag is promptly removed from the database. At this point, the user gains access to other forms and functionalities within the system.

To customise:

1. Email Template: Clone the "nuWelcomeEmailTemplate" (which will automatically be renamed to "nuWelcomeEmail" upon cloning).
You have the flexibility to rename it (code field) as needed.

2. Clone the "NUSENDWELCOMEEMAIL_Template" procedure (which will automatically be renamed to "nuSendWelcomeEmail" upon cloning).
In the PHP code, make sure to replace "nuWelcomeEmailTemplate" with the code field of the email template created in step 1.

Advanced customisation: Enhance the code to enable sending distinct email templates based on various factors, such as different languages or other criteria.

The OTP (One-Time Password) is currently not limited by time, but this feature is planned for implementation in the future.