I have a client who is not liking the fact tht he can't see users passwords so he can send them it if they forget it. It's for a small church website. Like most people here I don't think he should be able to see the password as it is not secure. What I would lik开发者_开发技巧e to do is give him a button that he can press so that he can direcrley reset a users password and for the new password to be emailed to them. Is there a module that can do this?
You don't need a module for that, it's built in functionality. The site owner can, just like the users themselves, enter the username or email address on www.example.com/user/password. The user will get a mail with a one-time login link. After following that link, the user can choose a new password.
By the way, tell your client that storing the passwords in plain text is not a good idea. He may be an honest and trustworthy man, but a small security problem could expose all the user's passwords and they will hold him accountable.
If you want to make a 1 click send new password button, you could do that with a form, that you place in the user's profile.
You can just make output the form that Drupal uses to request a new password (formid = user-pass), and pre fill it with the username and hide the input field, so he only sees a bottom. It would be same effect as going manually typing the user name in the built-in Drupal solution like marcvangend suggests, so this solution would be a bit more user friendly.
精彩评论