Problem in forget password

[Hanyadel]

SMTP and IMAP were activated via Google, and a Forget password was sent to the registered email address and received successfully. Another attempt was also successful, but upon sending it again, this message appears, and there is absolutely no solution. Please provide a solution, if possible, to activate this service and allow sending any number of messages at any time.

[victor]

This is a planned behavior due to too frequent password changes. Please wait a while and the functionality will become available again.

[Hanyadel]

Is it possible to reverse this behavior? Because I've waited more than 72 hours and received the same message.

[victor]

Use the "Send Password Change Link" option: https://docs.espocrm.com/administrat...existing-users as Admin for your Regular User. Or as Admin change the password yourself and send it to the User with a note to change it.

[Hanyadel]

First, I'd like to thank you very much for your help. Let's assume the admin personally wants to quickly create a password fork to continue their work. Do you understand what I mean? Or, the admin isn't at work and an employee wants to access the CRM.

[victor]

The best option is to send a password change request by Regular User once. Then follow the link in the email and then change the password. Otherwise, automatic protection will be triggered with a 403 error.

You can bypass it using the advice from my previous message, or by adding the following lines to /instance_name/data/config-internal.php:

'cleanupPasswordChangeRequestsPeriod' => '1 minute',
'passwordRecoveryRequestLifetime' => '1 minute',

In my example, their duration is 1 minute. You can increase it.
If this option does not work, you will have to go to the password_change_request table and delete the records from it, then wait another couple of minutes.

[Hanyadel]

In my example, their duration is 1 minute. You can increase it.
If this option does not work, you will have to go to the password_change_request table and delete the records from it, then wait another couple of minutes.


I can't understand where this record is being cleared from. Will this code solve the problem?

[victor]

I meant the "password_change_request" table in your database. It's easy to delete records from it via phpMyAdmin.