Forgotten password

[graham]

Hi, my forgotten password feature isn't working. I'm using a Microsoft email for the SMTP. MS say that the device application requires at least TLS 1.2. My server is running TLS 1.3, I checked with Ahmed and he suggested "You could try this: Open the generated "resources/PHPMailer/class.smtp.php" file, find and comment the following lines:

Code: Select all

      if (defined('STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT')) {
            $crypto_method |= STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT;
            $crypto_method |= STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT;
        }

which I did but it didn't help. I've also tried using a different non-Microsoft smtp provider that works on another app - but again, nothing. When I try to use the forgotten password screen - just a second screen telling 'An email with password reset instructions has been sent to your registered email address ...' but no email arrives. Can anyone throw any light on this? Any help appreciated.
(Ahmed, I thought I'd post it here rather than reply to you so if we find a solution it might help others.)
Thanks, Graham

[a.gneady]

Hmm ... just a quick thought: If you're hosting your app on Amazon AWS, they automatically block SMTP ports and you have to submit a request to open them: https://repost.aws/knowledge-center/ec2 ... 5-throttle

[graham]

No, it's regular shared hosting. I also tried another SMPTP provider and still not working. So it looks like I'll have to talk to Microsoft (last time it wouldn't work was because 2-factor was enabled on the email address, so I disabled it), and put a call into my hosting company too.

[graham]

So .. response from my hosts ... "On our shared server we have disabled PHPmailer for the security concerns". So I'm just trying to work out how to get my forgotten password feature working .. this must be a common problem?

[baudwalker]

I was having the same issue. the email could not be received by the replicant, mainly gmail and bigpond , and the sending email received a non-deliverable email alert.

I contacted my hosting provider and they said, "This can be due to the domains SPF record." So they configured an SPF record for the affected domains. and that was that all fixed.

Barry

[a.gneady]

So .. response from my hosts ... "On our shared server we have disabled PHPmailer for the security concerns". So I'm just trying to work out how to get my forgotten password feature working .. this must be a common problem?

Do they offer any alternative for sending mails? Is it specifically PHPMailer that they are blocking, or all SMTP ports in general?

[baudwalker]

Further to my issue it seemed to be the embedded link. Once I received the email that bounced back, I resent it in plain text and it worked fine.

Barry