• 1 page(s)
Password reset requests are NOT WORKING PROPERLY ON THE SITE. *THIS ISSUE IS FIXED*

EDIT: Much thanks to the folks at Curse for looking into this issue, and ultimately fixing it. I can't guarantee all 'password reset issues' are fixed for everyone, but this PARTICULAR bug has been addressed, and fixed accordingly.


Thanks!

'Caspien'

*************

 

I tried to explain this to Craig in another thread.. and since there were 2 issues being addressed in it, perhaps I failed to make my point clear.  There are indeed problems people are having with ISPs and mail hosts that use spam assassin. The default SA rules are blocking emails from curse, due to the score it's given. Possibly because the emails are not originating from curse.com, but rather wowdb.com and then link to curse.... looks a lot like a phishing attack, even though it's not.

If you are NOT receiving emails, contact your ISP/email host and have them adjust their Spam Assassin rules. (or simply allow all emails from *curse.com and *wowdb.com in your private rulesets)

 

However, the issue that myself AND others have posted about is NOT AN EMAIL ISSUE, and IS A SITE ISSUE.

*I* am getting the email just fine (BTW, you guys are being flagged by Spamassassin via weighted filtering.. might want to look into that. The issue ***I*** (and as a few others have noted) am having, is that I DO get the email.. and clicking the link gives an error from the website. I've referenced and said exactly what the error is, and what the common CAUSE is.

As stated before... newer accounts are able to retrieve passwords and change passwords accordingly... HOWEVER, it seems older accounts are having issues when you click on the link given in the email.

 

I'm going to go, step by step, exactly how I'm reproducing the error.

 

Step 1: Click Login in the upper righthand corner of the website, which takes me to a page that says:

 

Already a Curse Network member? Login.

followed by a login and password box.. and under that, there is a:

Lost your password?

 

STEP 2: Clicking on that link, I'm taken to another page that says:

Recover Password

Please enter the email address you used when you created your account, and we will send you an email with further instructions.
Email Address:
There is a field to type in your email address, and then there is a 'Recover Password >>' button.
STEP 3: I put in my email address I registered with, and I click that Recovery Password button, and I get:

Recover Password

You have requested that a new password be generated and sent to your email address
followed by a parenthesis that has my email address located in it. Ok.. fine...

STEP 4: A few minutes later, I get an email that says the following:
Subject:   Password Reset Instructions
From:   "Curse" <notification-noreply@wowdb.com>
Date:   Fri, October 3, 2008 1:58 pm
To:   myemail@myemail.com
Priority:   Normal
Options:  


Please visit the following URL to reset your CurseID password:
http://auth.curse.com/NetworkService.asmx/resetPassword?siteid=6666666&emailid=

I've truncated the remainder of the email link to protect my email and such...

STEP 5: NOW THEN. THIS IS WHERE IT STOPS WORKING.... I CLICK THE LINK IN MY EMAIL.... AND I GET THIS (In firefox, FROM auth.curse.com):


Object reference not set to an instance of an object.



THIS IS AN ASP ERROR, and it IS a common one, please look into your variables, they are either wrong, typo'd or are grabbing data incorrectly.


Many people are here due to the Wowace transition, and this is NOT a smooth transition by any means. I, like some here, are here to support them
entirelly. If it wasn't for the Wowace folks being so generous with their time and bandwidth over the last few years, I would not be wasting my time
helping document and troubleshoot something that should never have made it into a production website in the first place.

Oh yeah, BTW, your message input field doesn't wrap either.


Side note: Strangely enough, the wowace forums seemed to recognize my current username and login, but didn't grant permissions to post over there with this
information, so I find myself wondering if the issue may be an import issue from the wowace forums usernames? Time will tell.




[edited by: aspsucks at 2:24 PM (GMT -6) on 9 Oct 2008]

Report this thread post

I will notify the lead developer of the Auth server of the issue - its outside of my control.

Lead Developer, Curse.com

Report this thread post

PM me the exact link you were e-mailed.

Report this thread post

You've got mail :)

Report this thread post

I'm one of the wowace group thats hit by this, this morning. Would love to see this fixed before you retire WAU. IMO it is required. :)

Report this thread post

got the same problem.

Report this thread post

Quoted:

There are indeed problems people are having with ISPs and mail hosts that use spam assassin. The default SA rules are blocking emails from curse, due to the score it's given. Possibly because the emails are not originating from curse.com, but rather wowdb.com and then link to curse.... looks a lot like a phishing attack, even though it's not.

If you are NOT receiving emails, contact your ISP/email host and have them adjust their Spam Assassin rules.

End Quote|

Roadrunner does NOT block Curse.com, Curse-gaming.com, or WowDB.com at their end.

However, they DO offer webmail which MAY stop people from getting email if your prefrences are not setup properly. If you are using Outlook or similar programs and not their webmail, stuff might be filtered in your webmail and u will never know it. For example with Roadrunner, I had to goto http://webmail.rochester.rr.com  , login, goto the prefrences and play around with the way it handles spam telling it to deliver it and also set my allowed senders and added as mentioned above *curse.com, *wowdb.com, *curse-gaming.com just to be sure that I will eventually get my mails.

Additionally I had call their "national help desk" and have them submit a request to the MAPS Dynamic User List (DUL) Maintainers and unblock my specific IP address. So within 24-48 hours, in theory I should get emails if that was indeed the problem.

Seeing as have received 1 email from Curse originally (before my ISP gave me a new IP) with a link to click, the link works and I get told from the Curse website that my new password has been sent, however it never comes so I do not even know if that is the problem. -- Now if I try to request a password reset I do not even get an email with a link to click.

My head is spinning from all the effort it is taking simply to be able to get a password reset from Curse for Tolerant and Sardonya.

Report this thread post

I finally received an email sent personally from CBeers (Thank you) with a new password and am now able to get back onto my normal accounts and reset my own passwords. For anyone using RR as their ISP, call the "national help desk" and have them unblacklist your IP as mentioned above and that should help get things rolling or at least prevent future problems. I dunno who had my IP's before me, but they must have been spamming, trojaned or something and then I got stuck with those IP's.

-Tolerant

Report this thread post

I have the same problem.  I also posted in the other thread.  Glad to hear yours was resolved.  Nobody has dealt with mine yet. :(

Report this thread post

I just re downloaded curse client, as the updater wasn't working, and I can't remember my password either, and I cannot figure out how to reset it. I followed the instructions as listed earlier in the topic as well and got sent to curse's webpage, no password resetting options there at all.

Report this thread post

I have also recieved an email from Curse with a link to click to reset my password, but the link simply takes me to a generic login page (http://www.curse.com/login.aspx?ReturnUrl=/&action=reset).  All this does is give me a "Join Now" button to click, and when I do, it takes me to my profile page.  Nothing to give me an option to change my password.  Please help!

Report this thread post

After a lag for my email to sync up, I did note that I received an email from Curse with a new password.  Thanks!

Report this thread post

Ive just reset my password.

After clicking the link the URL gives me, it then sends me to the login page.

It does NOT tell me that it has reset my password!

So i try it a few more times since i guess it didn't work, THEN i get an email telling me my new reset password... mutliple emails...

You need something after the URL that says "wait for new email pl0z".

 

Oh and howcome my usernames changed?

Report this thread post

For password related issues, please email support@curse.com and we'll work to get them resolved for you.

Report this thread post
  • 1 page(s)
Subscribe to this thread: (you will receive emails when new posts are made)