| Author |
 Topic  |
|
|
Matt8109
New Member
64 Posts |
 Posted - 19 October 2002 : 17:57:48
|
Hello,
I just upgraded to the newest version of snitz, and it encrypted all the passwords, thats fine. Anyways were can I find the code that encrypts the password when they try to log in. I have to log the user into a different part of my site by using their forum username and password. I would send the data to default.asp, but the problem is I need to load some extra data I added to the database into session information.
Also, can this code be cahnged to ASP.NET code? As the session info is called by .net pages.
Thanks,
Matt |
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
|
|
wwsr
Starting Member
27 Posts |
Posted - 20 November 2002 : 08:43:29
|
I'm not an asp person...
Is there a document that explains how I can get hold of my users' passwords? Cheers 
quote:
Originally posted by ruirib
The code is in inc_sha256.asp. It's the SHA256 function.
|
 |
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 20 November 2002 : 09:10:04
|
| You cannot get hold of your users password, whatever you want to mean by that. Once encrypted, there is no way you can find what the passwords are. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
Edited by - ruirib on 20 November 2002 09:10:48 |
|
|
|
wwsr
Starting Member
27 Posts |
Posted - 20 November 2002 : 18:12:03
|
OK.
In the previous version I could send a user his password if they'd forgotten it.
Is there a password retrieval system available that the user can use in such cases?
Thanks
quote:
Originally posted by ruirib
You cannot get hold of your users password, whatever you want to mean by that. Once encrypted, there is no way you can find what the passwords are.
|
|
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 20 November 2002 : 18:27:43
|
The forgot password link can still be used, instead of sending them the password though it now resets it abd emails them (I think, haven't actually used it myself yet under 3.4 to be honest).
You don't need to know much ASP to use the inc_SHA256 though.
If you've got a member logging on from a different place in the site then simply include the above file on the page and then call SHA256(Members_Clear_Text_Password) and the returning value in SHA256 will contain the encrypted password, you can then compare this value with whats stored in FORUM_MEMBERS.M_PASSWORD in the database to confirm whether the password is correct or not. |
Kiwihosting.Net - The Forum Hosting Specialists
|
Edited by - Gremlin on 20 November 2002 18:28:30 |
|
|
|
Rasco
Advanced Member
Germany
3192 Posts |
Posted - 20 November 2002 : 18:29:24
|
Via the "Forgot Password?" link they can get a new password. You need to turn on the mail feature to use that.
|
German Snitz Forum
|
|
|
|
sabergurl
Starting Member
20 Posts |
Posted - 29 January 2003 : 14:40:38
|
Where do you turn on the "mail feature" in the new version?
I just tested out the "forgot password" page, and it sent me an email with an link, but that link produced an unknown page...
|
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 29 January 2003 : 14:45:47
|
| You don't need to turn on email, if you are already receiving emails. Probably the link in the email was broken in two line, no? Try to paste the whole link into the browser address bar and that should fix it. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
sabergurl
Starting Member
20 Posts |
Posted - 29 January 2003 : 14:52:43
|
No it wasn't broken in two lines...
I did a copy and paste in the browser url bar and still received the same error message:
The page cannot be found
I checked the DB and that key was inserted into the M_PWKEY Column...so that should be alright...
hmm... |
|
|
|
davemaxwell
Access 2000 Support Moderator
USA
3020 Posts |
Posted - 29 January 2003 : 15:00:38
|
quote:
Originally posted by sabergurl
Where do you turn on the "mail feature" in the new version?
I just tested out the "forgot password" page, and it sent me an email with an link, but that link produced an unknown page...
Make sure the forum URL is set properly. If not, it will provide and invalid link |
Dave Maxwell
Barbershop Harmony Freak |
|
|
|
sabergurl
Starting Member
20 Posts |
Posted - 29 January 2003 : 15:30:06
|
Got it...
Thanks guys...
Found the mistake...We had switched the strForumURL and strHomeURL around so that the link on the graphic goes to the main website not the forum index...
|
|
|
| |
Topic |
|
Topic Locked
