Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Passwords
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Passwords

 Post Reply Post Reply Page  12>
Author
garagetitan View Drop Down
Newbie
Newbie


Joined: 26 July 2003
Location: Australia
Status: Offline
Points: 8
Post Options Post Options   Thanks (0) Thanks(0)   Quote garagetitan Quote  Post ReplyReply Direct Link To This Post Topic: Passwords
    Posted: 26 July 2003 at 4:33am

Hey guys,

Is there any way to recover a password? I have forgotten my admin password, so i'm up the creek.

What can I do?

Back to Top
Bunce View Drop Down
Senior Member
Senior Member
Avatar

Joined: 10 April 2002
Location: Australia
Status: Offline
Points: 846
Post Options Post Options   Thanks (0) Thanks(0)   Quote Bunce Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 4:34am

what version?

Assuming you have file access to the database???

There have been many, many posts made throughout the world...
This was one of them.
Back to Top
b_bonnett View Drop Down
Mod Builder Group
Mod Builder Group


Joined: 16 April 2003
Location: New Zealand
Status: Offline
Points: 275
Post Options Post Options   Thanks (0) Thanks(0)   Quote b_bonnett Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 4:42am

If you've got the email functions turned on, then there is a link to reset your password on the Login page.

If you haven't, then I hope you've got some way to edit the database as follows:

  1. Back up the database.
  2. Register as a new user.
  3. Open the database, go into tblAuthor, and copy the 'User_code', 'Password' and 'Salt' values from the account you just registered to the Admin account.
  4. Log in to the Admin account using the password for the new account you created. Then change your password to something you'll remember and delete the new user you created.

Hope this helps,
Blair

Webmaster, The Plane Gallery
Greetings From Christchurch
Back to Top
garagetitan View Drop Down
Newbie
Newbie


Joined: 26 July 2003
Location: Australia
Status: Offline
Points: 8
Post Options Post Options   Thanks (0) Thanks(0)   Quote garagetitan Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 8:01am

Hey guys Thanks heaps for your response.

Bruce - its version 7.01

Blar - I'll give that a go mate cheers.

I'm also worried, is there anyway to decode the encryption system on the databases? If so how? Maybe someone got a hold of my database file??

Cheers,

James 

 

Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 8:32am

Encryption is one way 160bit with added salt value so decryption is almost impossible, the only way would be to guess what the password is.

Back to Top
garagetitan View Drop Down
Newbie
Newbie


Joined: 26 July 2003
Location: Australia
Status: Offline
Points: 8
Post Options Post Options   Thanks (0) Thanks(0)   Quote garagetitan Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 9:31am
Ahh that makes me feel better
Back to Top
pmormr View Drop Down
Senior Member
Senior Member


Joined: 06 January 2003
Location: United States
Status: Offline
Points: 1479
Post Options Post Options   Thanks (0) Thanks(0)   Quote pmormr Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 10:53am

i developed a tool to encode a new password so it will work with for forum decoders....

Back to Top
pmormr View Drop Down
Senior Member
Senior Member


Joined: 06 January 2003
Location: United States
Status: Offline
Points: 1479
Post Options Post Options   Thanks (0) Thanks(0)   Quote pmormr Quote  Post ReplyReply Direct Link To This Post Posted: 26 July 2003 at 10:59am

very simply, go into the database and find the administration ID (Its contained in the table "tblAuthor"). Find and copy the field named 'salt'. Copy it into the bottom of the script where it sayes "yoursalthere". Then replace the line that sayes "yourpasswordhere" with the password you want. Execute the script and it will print out a combo of numbers and letters. Copy that BACK into the "password" field of your database. Bam! your password's changed. (Mind you that this code will no longer work in newer versions, Bruce will soon change the forum so nobody can change the password like this...) This only encodes not decodes your password.

<%
Function getSalt(intLen)
' Function takes a given length x and generates a random hex value of x digits.
' Salt can be used to help protect passwords.  When a password is first stored in a
' database generate a salt value also.  Concatenate the salt value with the password,
' and then encrypt it using the HashEncode function below.  Store both the salt value,
' and the encrypted value in the database.  When a password needs to be verified, take
' the password concatenate the salt from the database.  Encode it using the HashEncode
' function below.  If the result matches the the encrypted password stored in the
' database, then it is a match.  If not then the password is invalid.
'
'
' Note: Passwords become case sensitive when using this encryption.
' For more information on Password HASH Encoding, and SALT visit: http://local.15seconds.com/issue/000217.htm
'
' Call this function if you wish to generate a random hex value of any given length
'
' Written By: Mark G. Jager
' Written Date: 8/10/2000
'
' Free to distribute as long as code is not modified, and header is kept intact

 Dim strSalt
 Dim intIndex, intRand

 If Not IsNumeric(intLen) Then
  getSalt = "00000000"
  exit function
 ElseIf CInt(intLen) <> CDbl(intLen) Or CInt(intLen) < 1 Then
  getSalt = "00000000"
  exit function
 End If

 Randomize

 For intIndex = 1 to CInt(intLen)
  intRand = CInt(Rnd * 1000) Mod 16
  strSalt = strSalt & getDecHex(intRand)
 Next
 
 getSalt = strSalt

End Function


Function HashEncode(strSecret)
' Function takes an ASCII string less than 2^61 characters long and
' one way hash encrypts it using 160 bit encryption into a 40 digit hex value.
' The encoded hex value cannot be decoded to the original string value.
'
' This is the only function that you need to call for encryption.
'
' Written By: Mark G. Jager
' Written Date: 8/10/2000
'
' Free to distribute as long as code is not modified, and header is kept intact
'
' The author makes no warranties as to the validity, and/or authenticity of this code.
' You may use any code found herein at your own risk.
' This code was written to follow as closely as possible the standards found in
' Federal Information Processing Standards Publication (FIPS PUB 180-1)
' http://csrc.nist.gov/fips/fip180-1.txt -- Secure Hash Standard SHA-1
'
' This code is for private use only, and the security and/or encryption of the resulting
' hexadecimal value is not warrented or gaurenteed in any way.
'
    Dim strEncode, strH(4)
    Dim intPos
   
   
    If len(strSecret) = 0 or len(strSecret) >= 2^61 then
  HashEncode = "0000000000000000000000000000000000000000"
  exit function
    end if
   
   
    'Initial Hex words are used for encoding Digest. 
    'These can be any valid 8-digit hex value (0 to F)
    strH(0) = "FB0C14C2"
    strH(1) = "9F00AB2E"
    strH(2) = "991FFA67"
    strH(3) = "76FA2C3F"
    strH(4) = "ADE426FA"
   
    For intPos = 1 to len(strSecret) step 56
  
  strEncode = Mid(strSecret, intPos, 56) 'get 56 character chunks
  strEncode = WordToBinary(strEncode) 'convert to binary
  strEncode = PadBinary(strEncode) 'make it 512 bites
  strEncode = BlockToHex(strEncode) 'convert to hex value
  
  'Encode the hex value using the previous runs digest
  'If it is the first run then use the initial values above
  strEncode = DigestHex(strEncode, strH(0), strH(1), strH(2), strH(3), strH(4))

  'Combine the old digest with the new digest
  strH(0) = HexAdd(left(strEncode, 8), strH(0))
  strH(1) = HexAdd(mid(strEncode, 9, 8), strH(1))
  strH(2) = HexAdd(mid(strEncode, 17, 8), strH(2))
  strH(3) = HexAdd(mid(strEncode, 25, 8), strH(3))
  strH(4) = HexAdd(right(strEncode, 8), strH(4))
  
    Next
   
    'This is the final Hex Digest
    HashEncode = strH(0) & strH(1) & strH(2) & strH(3) & strH(4)
   
End Function

 

Function HexToBinary(btHex)

' Function Converts a single hex value into it's binary equivalent
'
' Written By: Mark Jager
' Written Date: 8/10/2000
'
' Free to distribute as long as code is not modified, and header is kept intact
'

    Select Case btHex
    Case "0"
        HexToBinary = "0000"
    Case "1"
        HexToBinary = "0001"
    Case "2"
        HexToBinary = "0010"
    Case "3"
        HexToBinary = "0011"
    Case "4"
        HexToBinary = "0100"
    Case "5"
        HexToBinary = "0101"
    Case "6"
        HexToBinary = "0110"
    Case "7"
        HexToBinary = "0111"
    Case "8"
        HexToBinary = "1000"
    Case "9"
        HexToBinary = "1001"
    Case "A"
        HexToBinary = "1010"
    Case "B"
        HexToBinary = "1011"
    Case "C"
        HexToBinary = "1100"
    Case "D"
        HexToBinary = "1101"
    Case "E"
        HexToBinary = "1110"
    Case "F"
        HexToBinary = "1111"
    Case Else
        HexToBinary = "2222"
    End Select
End Function

Function BinaryToHex(strBinary)

' Function Converts a 4 bit binary value into it's hex equivalent
'
' Written By: Mark Jager
' Written Date: 8/10/2000
'
' Free to distribute as long as code is not modified, and header is kept intact
'

Back to Top
 Post Reply Post Reply Page  12>

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.