How can I redirect users upon login sometimes but not break the "Forgot password?" function?

Question

I'm using Rules to redirect users with certain roles upon login using the Page Redirect action. The "Force redirect" option is set to true (changing this to false does not fix the problem, and if it is false then users who log in from a block on the front page are taken back to the front page, which is not what I want).

My problem occurs when a user forgets their password and requests a one-time login link via e-mail. When the user clicks the link, he/she is taken to the login page. From this page, pressing "Login" will redirect the user according to my custom rule instead of taking the user to the page where the password can be changed.

How can I redirect my users using Rules without breaking the forgot password function?

Answer 1

You can do that with a rule like that:

{ "rules_after_login_redirect_to_news" : {
    "LABEL" : "After login redirect to news.",
    "PLUGIN" : "reaction rule",
    "WEIGHT" : "0",
    "REQUIRES" : [ "rules" ],
    "ON" : [ "user_login" ],
    "IF" : [
      { "NOT text_matches" : {
          "text" : [ "site:current-page:path" ],
          "match" : "^user\/reset\/",
          "operation" : "regex"
        }
      }
    ],
    "DO" : [ { "redirect" : { "url" : "news" } } ]
  }
}

Answer 2

OK...after doing some looking around and a bit of playing around, this solution seems to work:

Add a condition to your re-direct rule with the following php-evaluation (make sure you have PHP filter module turned on...It's part of the core):

if (arg(0) == 'user' && arg(1) == 'reset') { 
  return false; 
} else { 
  return true; 
}

This should check to see if the user is using a one-time password and if so skip the re-direct Rule.

Hope that helps! Found some different situations on Rules forum, and that seems to be a good compromise.

Answer 3

I tried the answer but it was not working for me, not sure what the ^ means but i ended up having my rule with the following:

{ "rules_after_login_redirect_to_news" : {
    "LABEL" : "After login redirect to news.",
    "PLUGIN" : "reaction rule",
    "ACTIVE" : false,
    "OWNER" : "rules",
    "REQUIRES" : [ "rules" ],
    "ON" : { "user_login" : [] },
    "IF" : [
      { "NOT text_matches" : {
          "text" : [ "site:current-page:path" ],
          "match" : "user\/reset\/*",
          "operation" : "regex"
        }
      }
    ],
    "DO" : [ { "redirect" : { "url" : "news" } } ]
  }
}

The * means that anything after user/reset will be brought into the rule.

Also it should be noted that if you are using this with anything else, you should add an 'AND' set with it so it will make sure it relates both sets properly.

Answer 4

I am sure there is 100 ways to do this. The Login Destination module looks like it may accomplish what you are looking for.

The Login Destination module allows you to customize the destination that a user is redirected to after logging in, registering to the site (7.x), using a one-time login link or logging out (7.x). The destination can be an internal page or an external URL. It is possible to specify certain conditions like referring pages or user roles and make the destination depend upon them. You may use PHP snippets to provide custom conditions and destinations. It is also possible to keep users on the currently visited page after logging in or out.

I looked through the issues, and it seems they have fixed the "broken forgot password" problem in their implementation. Might be worth a shot, although it looks like it isn't under "active" development. Last update was 2010.

Answer 5

The Password Reset Landing Page (PRLP) modules works well without requiring Rules (...in my experience).

There's also Password Hustle, which almost got me there as well.