Open
Description
Preconditions (*)
- Magento 2.4.1
- Any environment. Cloud or self-hosted. Open source and Commerce.
Steps to reproduce (*)
- Disable the "Contact us" form from the admin area (Configuration -> General -> Contacts -> Enable Contact Us)
- On the password reset route (/customer/account/forgotpassword/) request a password reset multiple times. Assuming out-of-the-box configuration you will eventually get the following error message:
We received too many requests for password resets. Please wait and try again later or contact hello@example.com
- Observe that the hello@example.com cannot be updated from any visible field within the Magento configuration panel. To update this email address you first need to re-enable the contact form (disabled in step 1) at which point a "Send Emails To" field becomes available within the same configuration group. Once the email address has been updated, the contact form can be re-disabled.
Expected result (*)
The hello@example.com email address should be easily updatable. You should not need to change the configuration for other areas of functionality (contact form) as a prerequisite for updating this field.
It may be that the password reset error message should actually be using a different email address field.
Actual result (*)
You are unable to update the reference to hello@example.com unless the contact form functionality is disabled.
Please provide Severity assessment for the Issue as Reporter. This information will help during Confirmation and Issue triage processes.
- Severity: S0 - Affects critical data or functionality and leaves users without workaround.
- Severity: S1 - Affects critical data or functionality and forces users to employ a workaround.
- Severity: S2 - Affects non-critical data or functionality and forces users to employ a workaround.
- Severity: S3 - Affects non-critical data or functionality and does not force users to employ a workaround.
- Severity: S4 - Affects aesthetics, professional look and feel, “quality” or “usability”.