password recovery fails due outdated recaptcha

[knireis]

It is impossible to recover the password because of an outdated recaptcha in subsonic.
Any workaround or upgrade to this?

[toolman]

If you are running your own Subsonic Server you can reset passwords yourself. See viewtopic.php?f=2&t=3084

[MichaelT]

Hi folks,

If you are running your own Subsonic Server you can reset passwords yourself. See viewtopic.php?f=2&t=3084

instead of reseting the admin password in the db I would like also getting a proper password recovery routine.
Is there a way to exclude the reCAPTCHA in the password recovery page?

Best greetings,
MichaelT

[toolman]

Take a look at https://github.com/joomla/joomla-cms/pull/19648

[MichaelT]

Take a look at https://github.com/joomla/joomla-cms/pull/19648

Hi Toolman,

thanks for your prompt feedback. As far I have understood the subsonic installation on my ubunutu server (16.02 LTS) is not using the MySQL server at all. So these instructions doesnt apply. If this insert statement works on the db/subsonic.script I dont know (only the author of subsonic can answer this question).

Best greetings,
MichaelT

[toolman]

The issue exists from March and Sindre doesn't seem to do any work on Subsonic anymore.
The current 6.1.3.version is released in november 2017. Since that time there is no Beta released, so I'm wondering if Subsonic has reached the end of the line.
On the other hand I'm very happy that password recovery doesn't work anymore.
If one of my users wanted a very easy (and unsafe) password to remember they just used this method, despite the fact that I configured their account to not be able to change their password.

[Rob]

Hi,

I have a solution to solve this problem. I have put nginx in front of subsonic, with php activated, then, i created an (php based) alternative password recovery system with validation email, using the subsonic API and cURL, to change the user password and works like a charm. If anyone are interested on this solution, i can help you to implement it.

If many people ask me, I suppose it would be better to publish the little application on github or something like that, but since it is a temporary patch, I do not know if it would be correct.

Greetings!.