SUPEE 6788 and Password Reset (blank page)

Question

I've installed SUPEE 6788. Then noticed that password reset page is blank when you click on the reset link in the email. Any ideas how to make the reset page to show up ? Previously reset page use to be this /customer/account/resetpassword/ After patch update it's /customer/account/changeforgotten/ and it's blank

Tech description from the Patch

APPSEC-1027, Insufficient Protection of Password Reset Process

This change affects templates by adding form_key to customer registration page template/customer/form/register.phtml and similar changes to password forgotten page layout/customer.xml and template/customer/form/resetforgottenpassword.phtml. If your store includes customized registration or password forgotten template, make sure to add this key there as well..

Solution 1

In case after the SUPEE-6788 patch you experience «Forgot password issue», in other words the page is blank.

You have to edit customer.xml file and replace customer layout customer_account_resetpassword with customer_account_changeforgotten.

File location: app/design/frontend/theme/default/layout/customer.xml the theme name might be different for you.

Refresh your cache, and all good!

Solution 2

Update your app/design/frontend/%custom%/%theme%/layout/customer.xml layout file with these changes:

source: gist.github.com/Nolwennig

Solution 3

Find

<customer_account_resetpassword translate="label">
    <label>Reset a Password</label>
    <remove name="right"/>
    <remove name="left"/>

    <reference name="head">
        <action method="setTitle" translate="title" module="customer">
            <title>Reset a Password</title>
        </action>
    </reference>
    <reference name="root">
        <action method="setTemplate">
            <template>page/1column.phtml</template>
        </action>
        <action method="setHeaderTitle" translate="title" module="customer">
            <title>Reset a Password</title>
        </action>
    </reference>
    <reference name="content">
        <block type="customer/account_resetpassword" name="resetPassword" template="customer/form/resetforgottenpassword.phtml"/>
    </reference>
</customer_account_resetpassword>

And Paste Below Code

<customer_account_changeforgotten translate="label">
    <label>Reset a Password</label>
    <remove name="right"/>
    <remove name="left"/>

    <reference name="head">
        <action method="setTitle" translate="title" module="customer">
            <title>Reset a Password</title>
        </action>
    </reference>
    <reference name="root">
        <action method="setTemplate">
            <template>page/1column.phtml</template>
        </action>
        <action method="setHeaderTitle" translate="title" module="customer">
            <title>Reset a Password</title>
        </action>
    </reference>
    <reference name="content">
        <block type="customer/account_resetpassword" name="resetPassword" template="customer/form/resetforgottenpassword.phtml"/>
    </reference>
</customer_account_changeforgotten>

Comments

[Keenora Fluffball]

Totally worked for me. Indeed it has changed the name of the page.

[redelschaap]

I also had to change the block type: <block type="customer/account_resetpassword" to <block type="customer/account_changeforgotten"

[rob_st]

Good job, this answer should be accepted. the customer.xml in the base-template actually is changed with the update, so this is only needed if you have a custom one.

[Jon]

there are multiple customer.xml - if you published the directory structure more people could get help app/design/frontend/theme/default/layout/customer.xml

[mylesthe.dev]

@Jon i've edited the answer to include the path for future use :)

[Umair Rana]

Great this made my day ;)

[WackGet]

Magento strikes again with pointless and site-breaking changes.

[beluga]

ohhhhhhhh thanks, it would have take me a lot of time to find the origin of the problem!