Re: Forgot Password encrypted email system

From: Nicole Calinoiu (nicolec_at_somewhere.net)
Date: 10/26/03


Date: Sun, 26 Oct 2003 17:08:30 -0500

Generate a new, random password and send that (as well as save its hash to
the db). In the e-mail, recommend that the user change their password at
first login.

HTH,
Nicole

"DDK" <ddkennard@hotmail.com> wrote in message
news:u9OQ1sAnDHA.1084@tk2msftngp13.phx.gbl...
> I really wish there were some examples explaining how to create a forgot
> password email link system when you encrypt a password in a database and
use
> ASP.NET/C# preferably. Since the password is encrypted in SHA1, I can't
> just send a user their password by email. So I'm not sure the best way to
> accomplish a forgot password module when the password is encrypted in the
> database. I've tried to find info on this but have not found anything
that
> really talks about this. Any help, links, or book suggestions would be
> greatly appreciated.
>
> Thanks,
> d.
>
>



Relevant Pages

  • Forgot Password encrypted email system
    ... password email link system when you encrypt a password in a database and use ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Changing default for new Access DB using MST
    ... it makes sense to convert a database to 2003 is if the database has code ... Options tools let's the user change it to Access03 before ... > Is there a way within the configuration wizard or a registry hack through ...
    (microsoft.public.access.setupconfig)
  • Re: How to handle different application version.
    ... to one of the lists on http://firebird.sourceforge.net/index.php?op=lists ... > works with a firebird database. ... > The database is in a CD so the user change the CDs when need to query ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: how can i get the mainboar ID and harddisk ID
    ... > wish to get some hardware infromation as encrypt source, ... > but, GetVolumeInformationonly get prartition ID, ... > it will be changed by user change the prartition. ... that I wish to get the mainboard ID ...
    (microsoft.public.vc.mfc)
  • Re: URL encryption
    ... You need to change the code on the server to ensure that user's are only submitting correct values that they are permitted to submit. ... Anything you "encrypt" will need to be done on the client, and that means that all the encryption code and encryption keys are on the server, and thus it is trivial for a user to work out what is being used. ... the user change the url values y do a lot of bad things. ...
    (microsoft.public.inetserver.iis.security)