Web Wiz Support and Community Forums : username and password incorrect hack? https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Thu, 16 Apr 2026 03:01:02 +0000 Wed, 05 Oct 2005 12:10:10 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=16812 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[username and password incorrect hack? : Thanks Borg, but I had already...]]> https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91749.html#91749 Author: manster
Subject: 16812
Posted: 05 October 2005 at 12:10pm

Thanks Borg, but I had already read that post. This does not seem to be the issue. The email addresses are fine, because it happened to oney of my usernames as well. I have to reset them to log back in or click forgotten password. Even though, in some cases the forgotten password that is in the email does not work for some users either, this might be another issue as well.
 
Thanks
]]> Wed, 05 Oct 2005 12:10:10 +0000 https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91749.html#91749 <![CDATA[username and password incorrect hack? : I have had serveral people report...]]> https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91719.html#91719 Author: WebWiz-Bruce
Subject: 16812
Posted: 05 October 2005 at 5:28am

I have had serveral people report recently that people are using the forgotten password feature to change other users passwords.

How the forgotten password fetaure works is to gernerate a new passwordfor the user and email it to them, as passwords are 160bit one wayencrypted they can not be recovered so new passowrds have to begenerated.

It maybe worth asking your members with this problem to check their email accounts to see if they have a changed password email.

To prevent this problem in future versions I am planning on creating anew system that asks the user when registering to put in a secretequestion and aswer, then only send the new password if this question isanswered correctly.
]]> Wed, 05 Oct 2005 05:28:06 +0000 https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91719.html#91719 <![CDATA[username and password incorrect hack? : I&#039;m having a rather strange...]]> https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91712.html#91712 Author: manster
Subject: 16812
Posted: 04 October 2005 at 9:40pm

I'm having a rather strange login problem. Randomly some user are complaining that they cannot login. They were able to login before perfectly, but all of a sudden some can't. So I have to reset the password for them to get back in. They are getting the message, "sorry, the username or password entered is incorrect."
 
I also tried to do it from another computer and I can't login for them. I have deleted cache and cookies and that did not solve the problem. I have to login as an administrator and change their password to be able to login again. I'm running sql server 2000 on a windows server 2003. I have to do this every now and then for it's very random. And yes I've added the domain to allow cookies.
 
Have I been hacked? I did not have the 7.2 patch. Now I do, and I'm testing.
 
Thanks
]]> Tue, 04 Oct 2005 21:40:18 +0000 https://forums.webwiz.net/username-and-password-incorrect-hack_topic16812_post91712.html#91712