mass password update
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=29153
Printed Date: 01 April 2026 at 12:39pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: mass password update
Posted By: Aliceerickson
Subject: mass password update
Date Posted: 25 February 2011 at 6:37pm
| I need to do a complete password reset on an installation that's running encrypted passwords. Has anybody done this? What I'm wanting to do is to reset all the passwords to the same thing and then notify the members that they need to update their passwords. |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 25 February 2011 at 6:58pm
|
If you change the password to the same password for all users then anyone could login as another users, view their profile, and get personal details on them. If your users need a new password best to direct them to the forgotten password page. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Aliceerickson
Date Posted: 25 February 2011 at 7:34pm
|
Not to be arguing the point here, and I certainly thank you for your speedy reply, but this case isn't a normal forum. I didn't go into a lot of details, but this is a closed forum for a small organization. The only people who will have access to it are the members of that organzation. I did an import of the members, but I missed the point that, lacking a password field in the import table, the forum system would create and encrypt a password. I'd rather not run the import again, if I can avoid it. The mass password update I'd like to do would only serve as a temporary password until the members can log in and change it. The people that I've added through the import lack both username AND password. I massaged the data to give each a unique unsername, but it's not always perfectly obvious what that username would be for a given person. I know I could have them sign up for themselves and dodge the whole issue, but I'd rather not open the forum to signups at all since it's going to be for members of the organization only.
And, on the subject of the forgotten password page, how do you get that to come up anyhow? I've very carefully entered that page name into my browser bar, and every time I get redirected to the forum home page. I can't even see what this looks like, so I can't see if I think it's going to work for this case at all - or if I can make it work for this case at all.
|
Posted By: 123Simples
Date Posted: 25 February 2011 at 7:51pm
|
Would it not be far easier to (assuming you are the administrator of the forum) to edit each user, allocate a new password for each member, and then send them the details individually, or have I missed the whole point?
------------- http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design |
Posted By: Aliceerickson
Date Posted: 25 February 2011 at 8:03pm
|
No, I don't think it would be easier, actually. I can do that, and I probably will end up doing that, but it would certainly take longer than an updater script that would take a generic password, get a new salt, create the encrypted password and update each account password and salt (I pulled code out of the registration update page). I took a stab at that already on my localhost, and it looks like it should work, but I must be missing something since login doesn't work. I spent a half hour on that, which would have been faster had I gotten it to wor. That didn't happen, so I think now I just have to muscle on and reset them all manually. |
Posted By: WebWiz-Bruce
Date Posted: 26 February 2011 at 11:34am
|
As you mention this is an usual circumstance so there is no automated way to do this. The simplest way to do this is:- 1. Create a user giving them the password you want all user to have 2. Open the database in a database tool and locate the table tblAuthor 3. Open the tblAuthor table and fined the new member you created 4. Find the Password and Salt field for this new user. What you will need to do is to update all the Password and Salt fields for all your other members to match that of this new member By creating this new user and than replicating the Password and Salt field to all the other members they would all end up with the same password. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Aliceerickson
Date Posted: 26 February 2011 at 9:39pm
|
The perfect 5 minute fix! Thank you so much. I don't know why I didn't think of doing that, but there I went. Chasing off and over-complicating things. I'm really enjoying working with your forum system, and I really appreciate your help in this. |
