I am making a password reset form, which contains two fields: password1 and password2. The user enters their new password and then re-types their new password again.
I’m not sure how to make a validation rule that will compare the two values from the fields and see if they’re the same.
if you are using Auth component then you need to hash the second password in the controller, because the password will be automatically hashed.
To compare 2 fields, you need to write a custom validation rule: http://bakery.cakephp.org/articles/aranworld/2008/01/14/using-equalto-validation-to-compare-two-form-fields (read the comments also, because the tutorial itself is kind of old)