Textpattern CMS Plugins: Introducing rah_change_passwords

admin-ajax

If you run a multi-user Textpattern CMS instance, there may be times that you want to enforce a password change on a user account. Typically, the process of changing a password for a user entails the user changing it via the interface, or an administrator triggering a password reset for a given user. When the password is reset, the new password is sent over email and while the ideal world scenario is that the user logs in with the new password and subsequently changes it for security reasons, that will not always be the case.

Enter rah_change_passwords. This plugin, another FTP-free extension to Textpattern core, enables the ability for an administrator to take charge and perform arbitrary password maintenance on user accounts. As per previous plugin examples in this series, snag the plugin from the source and copy the contents. The Textpattern-ready version of the plugin looks like this (edited for brevity):

# Name: rah_change_passwords v1.0.1
# Maintain and change user passwords
# Author: Jukka Svahn
# URL: http://rahforum.biz
# Recommended load order: 5
# .....................................................................
# This is a plugin for Textpattern - http://textpattern.com/
# To install: textpattern > admin > plugins
# Paste the following text into the "Install plugin" box:
# .....................................................................
H4sIAAAAAAAAA61a/XLbtrL/23oKlPGUUsehZMtOHSVunEnS1J049djOOedOp8OBSFBkTRIs
AUrRaf02eYb7Anmxu7sAKeozTnszztgCF/v52w8C4qPD49GfanQ8cnKeCeeZGh0NRk7JYz+I
eT4RfsGVmskyVPjs+5EzFaVKZI6fTkbOoTfwDvHvJyOHVzqWJX44PBw5P1d3d5zdTHlMtIeD
[...]
FtpT2jp6i9hhmufSLJowihBfVbB4G1Da4QzhFgTQ43JN09nixe5naeZ9aGFI9bOMCdofSFH7
PmeguOZwM7ENTgmCx+jwixwGTZ4C+1RgB6dvXI6cLKTz6eHRyBk+efr9MDgR0cnwyUAMjobi
9HTAT/hJFJyeDscD59n9/wGQH1MVTCoAAA==

The process to install and activate is the same as before: copy + paste the plugin file contents into the box at Admin → Plugins, click or tap Upload then Install to confirm. The default state of any newly-installed plugin is to have its status set to disabled – this will manifest itself under the Active header as No. Clicking or tapping No will enable the plugin and switch it to Yes.

This is what the Admin → Users → Edit Author page looks like before the plugin is installed:

Google ChromeScreenSnapz015

On successful activation of the `rah_change_passwords` plugin, the format of the Admin → Users → Edit Author page will change.

Google ChromeScreenSnapz016

The Textpattern user password cannot be retrieved, but can be changed to something more appropriate. Whether or not the user is informed of this password change via email is left as an exercise for the administrator. Your security policy may want to include provision for the end user changing this changed password to something more memorable.

Looking for quality Textpattern Hosting? Look no further than Arvixe Web Hosting and use coupon TEXTPATTERN for 20% off your first invoice!

Tags: , , , , , , , , , , , , , , | Posted under Textpattern | RSS 2.0

Author Spotlight

Pete Cooper

Pete Cooper

Pete Cooper has been using Textpattern since 2005. Textpattern is his preferred CMS weapon of choice. Its logical and flexible approach to content management makes Pete happy, as does its lightweight core and helpful user community. Pete's website - petecooper.org - runs on top of Textpattern and chronicles his day-to-day experiences from his home near the Atlantic in north Cornwall, United Kingdom.

Leave a Reply

Your email address will not be published. Required fields are marked *


× 4 = 32

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>