When a user is attempting to alter their profile it is failing to accept their password. If they enter the password 2x - as if they are altering their password - it then works but causes confusion owing to the warning about having to log back in and so on. It appears the top password box isn't working as it should. What could be wrong?

What do you mean by "alter their profile"? MiniBB doesn't support profile altering operations.

When they attempt to update their profile - say change their email address or something. You should only have to enter the password once, apparently, in the top password box but this isn't working as it appears to ignore it.

Sorry, I am still not sure what do you mean.

For updating the Profile, you just need to be logged in at first.
Then go to the Profile and change any field except the Password field and the Password repetition field. They are not required to fill in when updating the regular info. As it's written by default, "Fill in only if you change your password", that means, these fields are required to fill in only when the Password is changed itself.

Does it confuse? Anything should be improved because of that? Let me know.

Well it has confused myself and another user. I have altered the language file now ...



Another bit of confusion was to do with editing. The user didn't know how to apply the edit. All I did then was to again alter the language file so that the edit button then read 'Apply Edit'.

Well... I think adding just what is filled under $l_onlyIfChangePwd would be enough, 'cause it's the same meaning... and not sure why would you need to change the button. In default version it says "Edit Profile" so we can't be responsible for all users who are not able to read what's written... ;)

I'll update the confusing Password part in the next miniBB, not a difficult story, thanks

Well I didn't get very far with that. It appears the browser autofill is causing the problem. On loading the profile page the password box is being filled in automatically - row of dots. This is causing any update to fail as they are leaving the password in. This is what I have done to correct this.

Ditched altering the language file as that was causing a problem with the login form.
Altered the user_databform.html file - password part to read like this ...

If you notice I have added autocomplete="off" to the password input. This stops the browsers adding a stored password. I have also removed the madatory asterix from both the Password and Repeat Password text. There is warning text now too below the bold Password text.

Just tried it out on the person that is having problems and she seems to be ok now.

Thanks!
I'll keep this all in mind when working out the next release.