I'm using default/user/*request_reset_password* and default/user/* reset_password* in my app.
Neither request_reset_password, nor reset_password form performs validation on user's input. Seems strange, as the form is a clear auth(). Code: default/user: def user(): auth.settings.formstyle = 'divs' if request.args(0) == 'request_reset_password': auth.request_reset_password(next = URL('default', 'index')) return dict(form=auth()) user.html: {{extend 'layout.html'}} {{if request.args(0) == 'request_reset_password':}} <h2 class="header">Password reset</h2> {{=form}} {{elif request.args(0) == 'reset_password':}} <h2 class="header">Choose new password</h2> {{=form}} {{pass}} -- --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.