Search results matching tag 'passwordrecovery'

Password Recovery

bohtsu — Mon, 07 Dec 2009 05:00:00 GMT

Anyone run into issues with passwords that have $$ in it? I'm using the asp:PasswordRecovery control along with a password email template. For example, if the password is "test$$", the password recovery email received lists it as "test$".

Thanks!

Password recovery control

shtrudel — Sat, 14 Nov 2009 05:00:00 GMT

Hello everyone,

I am trying to implement the passwordRecoveryControl in my site. I created a new web form with the PasswordRecoveryControl

and after trying to recover my password I get two problems,

1. I cannot sign in to the site I am building (somehow password changed)

2. The password sent to me in the returning email is gibrished

the page code follows -

Code behind as well -

Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail
        Dim mm As New Net.Mail.MailMessage()

        mm.From = New Net.Mail.MailAddress(e.Message.From.Address.ToString, "My system")

        mm.Subject = "Password recovery"

        mm.[To].Add(e.Message.[To](0))

        mm.IsBodyHtml = True
        mm.Body = e.Message.Body

        mm.Body &= "<% Password %>"
        Dim smtp As New Net.Mail.SmtpClient()
        smtp.EnableSsl = True

        smtp.Send(mm)
        e.Cancel = False

    End Sub

This is what I get in the email -

Please return to the site and log in using the following information.
User Name: myUserName
Password: 9?f;Vxnj+qT/5#

best regards

PasswordRecovery in asp.net mvc

jeremyzb — Tue, 03 Nov 2009 05:00:00 GMT

hi, all

I put a PasswordRecovery Control in ForgotPassword.aspx and the page's MasterPageFile is Site.Master. Then I inputed a userName and submit it. The error is followed, however the password was  formated and the email was sent.

System.Web.HttpException: Validation of viewstate MAC failed. If this application is hosted by a Web Farm or cluster, ensure that <machineKey> configuration specifies the same validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.

Line 17:               
Line 18:             <div id="logindisplay">
Line 19:                 <% Html.RenderPartial("LogOnUserControl"); %>
Line 20:             </div> 
Line 21:  

So I create a page without a master page, it's correct.

How to customize the e-mail sent by PasswordRecovery In The SendingMail Event and Include The Newly Reset Password In The E-mail

jon333 — Sat, 16 May 2009 04:00:00 GMT

Hi,
I have a multi-lingual application that needs to send different password recovery e-mail messages to the user based on their language preference. The problem is that I cannot simply read one .txt file from the MailDefinition of the PasswordRecovery control due to this and when I try to programatically customize the e-mail sent by the system the <% Username %> and <% Password %> tokens are not being replaced.

How can I customize the e-mail message sent to the user when they are resetting their password and include the new password in the e-mail?

Please note that I get an error when I manually try to reset the password in the SendingMail event, but I could not find another way to obtain a reset password for the e-mail.

Protected Sub PasswordRecovery1_SendingMail(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.MailMessageEventArgs) Handles PasswordRecovery1.SendingMail
        Dim strFinalBody As String = TryCast(GetGlobalResourceObject("Emails", "PasswordResetBody"), String)

        Try
            Dim usr As MembershipUser = Membership.GetUser(PasswordRecovery1.UserName)
            'Returns object not set to an instance of an object error
            'Passwords are hashed and only resets are enabled.
            Dim password As String = usr.ResetPassword(PasswordRecovery1.Answer)

            MsgBox(password.ToString)

            e.Message.From = New MailAddress("test@test.com")
            e.Message.CC.Add(New MailAddress("devemail@test.com"))
            e.Message.Subject = TryCast(GetGlobalResourceObject("Emails", "PasswordResetSubject"), String)
            'Perform subsitution

            strFinalBody = strFinalBody.Replace("&lt;% UserName %&gt;", PasswordRecovery1.UserName)
            strFinalBody = strFinalBody.Replace("<% Password %>", password)

            strFinalBody = strFinalBody.Replace("<%UserName%>", PasswordRecovery1.UserName)
            strFinalBody = strFinalBody.Replace("<%Password%>", password)

            strFinalBody = strFinalBody.Replace("&lt;% UserName %&gt;", PasswordRecovery1.UserName)
            strFinalBody = strFinalBody.Replace("&lt;% Password %&gt;", password)

            strFinalBody = strFinalBody.Replace("&lt;%UserName%&gt;", PasswordRecovery1.UserName)
            strFinalBody = strFinalBody.Replace("&lt;%Password%&gt;", password)

            e.Message.Body = strFinalBody
            e.Message.IsBodyHtml = True
        Catch ex As Exception
            MsgBox(ex.Message.ToString)
            Response.Redirect("~/Errors/Error.aspx")
        End Try
    End Sub

Previously locked out user cannot retrieve password

relish27 — Fri, 08 May 2009 04:00:00 GMT

Hello,

I had a user who was locked out of the membership security system -- because of the default three failed login attempts.

I increased the max login attempts -- and I also unlocked this user using the UnlockUser() method.

However, after verifiying that this user is now NOT locked out and is also approved -- I keep getting the general error response.

"Your password cannot be retrieved at this time. Please try again later."

This retrieval method has worked in the past. Any ideas why this might be happening now? Is it related to the user having been locked out before?

Thanks.

A question about Passwordrecovery wizard

elshorbagy — Wed, 08 Apr 2009 04:00:00 GMT

Hello,

Users create account using membership control,and passwords are Hashed. I'm using passwordrecovery control to reset the user password if they forgot it by asking them for email.

The problem is that if I know someone's email, I can rest their password. I want the passwordrecovery to send an email with a link to the user. And when the user clicks on the link the password changed. I don't want to use the secret question method. Any help???

Thank you

Password Recovery - allow user to set question and answer.

bbcompent1 — Sun, 12 Oct 2008 04:00:00 GMT

Ok, here's my situation. I have roughly over 400 active directory user accounts and would like to employ the password recovery feature in asp.net 2.0. However, the main issue is the only time that the wizards allow the setting of that is when an account is created. Another problem is the active directory browser won't allow the field to be displayed in MMC, kind of a bummer but anyway, is there a way I can do the following and if so, how:

1. If the question and answer is blank, take them to set that when they log in.
2. If they are completely messed up, allow them to contact us to change the question/answer combination for them or to clear it?
3. If they are authenticated, allow them to change email, question, and answer themselves?
4. If they haven't changed their password in x days, force them to change it at log on?

I appreciate any assistance anyone can offer me. Thank you!

PasswordRecovery control reset password workflow

mentat — Sat, 11 Oct 2008 04:00:00 GMT

Hi there, I am using passwordFormat="Hashed", no security questions.

1. I want the user to enter email instead of username to kick off a reset, how do I do this?

2. I beleive the workflow once you hit Submit on the PasswordRecovery is it changes your password in the database and emails you the password, you can then log in with this new password. This is bad, because if I know anyones email address using my website and I'm a malicious user I can just reset their passwords all the time and wreck havok.

What I'd like is on Submit for the PasswordRecovery control to email the user's email address with a link in it which when clicked does the reset or takes the user to a change password page, this way only the owner of the email account can actually do the reset. If you read the wording here http://www.facebook.com/reset.php this infurs what I am talking about.

How can I achieve both these things?

Thanks, m.

passwordrecover control doesn't work!!!

vjero — Thu, 25 Sep 2008 04:00:00 GMT

Webconfig

<asp:PasswordRecovery ID="PasswordRecovery1" runat="server" MembershipProvider="xxxxSqlMembershipProvider"
                MailDefinition-Subject="xxxx password recovery" MailDefinition-From="donotreplay@xxxx.com"
                MailDefinition-BodyFileName="~/templates/passwordrecover.txt"

                OnSendMailError="SendingMailError"
                OnUserLookupError="UserLookupError"
                OnVerifyingUser="VerifyEmail"
                EnableViewState="true"
                QuestionFailureText="Incorrect question answer, please try again.">
                <SuccessTemplate>
                <div class="passwordSentMsg">
                Password sent succesfully. Please check email and try to sign up with given credentials.
                </div>
                </SuccessTemplate>
                <UserNameTemplate>
                    <div class="vertical">
                        <label for="UserName">
                            Enter Your Email Address:</label>
                        <div class="formrow">
                            <asp:TextBox ID="UserName" runat="server" CssClass="styledinput"
                            Width="400" ValidationGroup="RetereivalPassword"
                            AutoCompleteType="Email"></asp:TextBox>
                            <asp:RequiredFieldValidator runat="server" ID="EmailValidator"
                            ErrorMessage="Email is required"
                            ControlToValidate="UserName"
                            ValidationGroup="RetereivalPassword"> *</asp:RequiredFieldValidator>
                        </div>
                    </div>
                    <div class="formrow">
                        <asp:Button runat="server" ID="btnRetreiveEmail" CommandName="Submit"
                        Text="Retreive Password" OnClick="RetereivePassword" ValidationGroup="RetereivalPassword" />
                    </div>
                </UserNameTemplate>
                <QuestionTemplate>
                    <div class="vertical">
                        <label>Question:</label>
                        <div style="padding:0px; height:auto;">
                        <asp:Label ID="Question" runat="server"></asp:Label>
                        </div>
                        <div style="padding:0px; height:auto;">
                        <label for="Answer">Answer:</label>
                        </div>
                        <div>
                            <asp:TextBox ID="Answer" runat="server" CssClass="styledinput"
                            Width="400" ValidationGroup="RetereivalPassword"></asp:TextBox>
                        </div>
                        <div class="passwordRetrievalInstrunctions">
                        System will generate new random password. Password can be changed at profile page.
                        </div>
                    </div>
                    <div style="padding:0px; height:auto;">
                        <asp:Button runat="server" CommandName="Submit"
                        Text="Retrieve password" ValidationGroup="RetereivalPassword" />
                    </div>
                </QuestionTemplate>
            </asp:PasswordRecovery>

and code:

protected void RetereivePassword(object sender, EventArgs e)
        {

        }
        protected void VerifyEmail(object sender,System.Web.UI.WebControls.LoginCancelEventArgs e)
        {
            PasswordRecovery ctrl = (PasswordRecovery) sender;
            var users = System.Web.Security.Membership.FindUsersByEmail(((TextBox)ctrl.Controls[0].FindControl("UserName")).Text);
            if (users.Count>0)
            {

                var enumerator = users.GetEnumerator();
                enumerator.MoveNext();
                System.Web.Security.MembershipUser user = (System.Web.Security.MembershipUser)enumerator.Current;
                ctrl.UserName = user.UserName;
                e.Cancel = false;
            }
            else
            {
                //email doesn't exist
                ErrorMsg.Visible = true;
                errorlabel.InnerHtml = "Emai doesn't exist";
                directions.InnerHtml = "Please try again, providing correct email address";
                e.Cancel = true;
            }
        }
        protected void SendingMailError(object sender, EventArgs e)
        {
            PasswordSendingError.Visible = true;
        }
        protected void UserLookupError(object sender, EventArgs e)
        {
            //user lookup error! something went wrong or system is unable to connect to database..
            FetchingUserError.Visible = true;
        }

And this doesn't throw any error. and it doesn't work! (it was working before, but now it doesn't! Why, because of validators?=?

password recover ? it sent me new user password, how can i get user password ? (not new user password )

oguzkaygun — Wed, 23 Jul 2008 04:00:00 GMT

password recovery sent me new user password, how can i get user password ?(not new user password)

it also changed user password to new user password. i want that it should not change user password

how can i do this ?

Sincerely