Sign in Register
Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Shwetha Shankar 21 posts 41 karma points
    Feb 02, 2011 @ 15:08
    Shwetha Shankar
    0

    Retrieving the hashed password in clear text

    Hi,

    I am trying to build a password reminder service to the website that I have built using Umbraco. I am using the standard Umbraco membership provider.

    When I retreive the password using the follwoing code -

    Member thisMember = Member.GetMemberFromEmail(UsernameText.Text);
    string strPassword = thisMember.Password;

    strPassword is understandably in a hashed form. I would like to know how I can convert this to clear text. I have tried changing the password format in web.config to Encrypted and adding the <machineKey> section in teh web.config, but I have become painfully aware that since members and users have already been created in Umbraco, its too late for me to change teh password formats.

    Your help is greatly appreciated.

    Thanks,
    Shwetha

    Copy Link
  • Ismail Mayat 4511 posts 10092 karma points MVP 2x admin c-trib
    Feb 02, 2011 @ 15:33
    Ismail Mayat
    2

    Shwetha,

    The whole thing about hashed password is that it cannot be unhashed. You will need to implement password reset rather than password reminder.

    Regards

     

    Ismail

    Copy Link
  • Stefan Kip 1614 posts 4131 karma points c-trib
    Feb 02, 2011 @ 15:47
    Stefan Kip
    0

    Exactly, +1 on Ismail's comment.
    Never send the password, just create a password reset page with a nice unique hash in the url.

    Copy Link
Please Sign in or register to post replies

Write your reply to:

Draft