Support

Mismatched Fields on the Edit Account Page: If you change the State to "North Carolina" and update, it displays "PROVINCES" afterwards. If you choose the country "Netherlands", it afterwards displays "Netherlands Antiles". There are a few others as well.

Digital Products: E-mailing a digital product does not send an email.

Password Reset Routine not secure.
The current reset routine allows for a malicious user to enter someone else's email address and thereby resetting their password. This is open to abuse.

The "Wordpress" model works much better:
1. Enter username or email address to reset password.
2. User receives email with instructions that includes link to reset.
3. When the user clicks on the link in the email it load a webpage where a new password can be entered right away (This means that it could be ignored if this routine was not initiated by the actual user and the password will not be changed)
4. User enters password twice and this resets the user's password.
5. User is then presented with a login screen to continue.

I think this will enhance ppSD2 usability where this is concerned.

When adding (or trying to add) a new secure area, the program parses through the entire directory structure from the domain root folder. If a domain contains hundreds of directories and sub-directories, the wait time is incredibly long before one can add a secure area, even if "Manually enter folder" is selected. This is a real problem, especially if one only wants to user "User Grouping". The program should not have to parse through the entire directory structure. This option to select a folder from a list is not necessary and causes problems as the "Add Secure Area" button only appears after the entire directory structure has been parsed.

Under Secure Areas, the option to "Edit User" is problematic, as the program attempts to list all users on one page in an alphabetic list. If there are tens of thousands of users in the system, this takes a very long time to list all users. Either remove this option to select users from the entire list, or provide a field to add a comma-delimited list of users by username.

Corrected on 11 August 2011:
The Ajax script on the "Edit Account" page that checks a password and reports it as weak does not work at all. It always reports the password as weak no matter how strong it is.