I'm trying to create a process that allows me to limit the non-alphanumeric
characters generated with the PasswordRecover y control. Specially I want to
suppress some characters for security reasons. With textboxes I'm doing this
with a RegularExpressi onValidator control and have the following the
following attribute setup:
ValidationExpre ssion="^[a-zA-Z0-9\.\-_@#$%^&+=]{6,100}"
This limits the user input to alphanumeric characters as well of some
selected characters. The problem is when I use the built-in PasswordRecover y
control, I can't find a way to limit the random characters, some of which
cause a validation error within the RegularExpressi onValidator control. For
example, the following was created by the PasswordRecover y control for a new
password:
UFa]d+T|!&D9eE
Some of the characters violate my regular expression. So I tried two other
approaches which also have failed. One was to simplify my regular expression
to just check that a minimum and maximum number of characters were passed,
such as:
ValidationExpre ssion="^[\w]{6,100}"
So "UFa]d+T|!&D9eE" should pass this test, but unfortunately it doesn't
because of the bracket ("]") confuses the regex processing.
The other path I explored was creating my own Password Recovery user control
and started coding with MembershipUser. ResetPassword and related functions.
Unfortunately I couldn't find away to reset the user password without having
the current password. Since I'm using the hash method to store the password,
I can't obtain the password via code. Since the user forgot the password, I
can't ask the user for it on the form. It seems like catch-22!
My two questions:
1. Using the PasswordRecover y Control, can I limit the characters that are
randomly generated when the user control is created? Even just limiting to
alphanumeric would be good.
2. Creating my own control, how do I reset the password without knowing the
original password, while using the hash method to store passwords?
0  2023  This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Amelyan |
last post by:
Can anyone provide a simple example of using ASP.NET 2.0 PasswordRecovery
control? All I need to accomplish is to e-mail user password using provided
username in PasswordRecovery control. However, I don't seem to find to
implement the right handlers.
Thanks,
|
by: paulmac106 |
last post by:
Hi,
I'm having 2 problems with this control.
I save the password in the db as clear text, when a user uses the
PasswordRecovery tool the value is then encrypted and sent to the user
encrypted.
Also, can I use the PasswordRecovery tool without the part where it
asks you the security question? I want the user just to enter their
|
by: ned.kraushaar |
last post by:
Currently, the email that gets sent to a user with a new password is
very cryptic:
Please return to the site and log in using the following information.
User Name: nedkraushaar
Password: @(])1L7s!.xUD5
I would like to add some additional text and found that one can use
custom text specified in a text file by using the <MailDefinition> tags
within the <asp:PasswordRecovery> tags such as below:
|
by: =?Utf-8?B?V0I=?= |
last post by:
Hi,
Does anyone know how to programmatically get the new password from the
PasswordRecovery control?
I'm modifying the SendingMail event of my PasswordRecovery control so that I
can customize the message, but I don't know how I can get the new password to
include in this message.
Thanks,
|
by: =?Utf-8?B?UmFq?= |
last post by:
In PasswordRecovery control, in case if the mail server is not accessable,
how can we notify the user it before resetting the password. I know we have
"SendMailError" event, but it fires only after the password is reset.
Is there any option available in PasswordRecovery control?
ASP.NET 2.0 /C#
| | |
by: Ben |
last post by:
Hi,
when a password is sent to the user via email with the PasswordRecovery
control, is it sent in "clear" even if the password is hashed or encrypted?
Thanks
Ben
|
by: =?Utf-8?B?TW9yZ2Fu?= |
last post by:
I have a PasswordRecovery web control as part of my login functionality that
I have successfully tested in an application I'm building. I was asked to
migrate some historical user data into the aspnet_application_services tables
for this app, so I thought the best thing to do would be to just migrate all
the user data with the exception of the passwords, and add text to the
membership comment that read 'EncryptMe' or something like that. ...
|
by: paul.haines |
last post by:
Does anyone know how to change the current mode in the
PasswordRecovery control?
I have an instance on the "login.aspx" page and, after the user has
successfully had their password emailed to them I was hoping I could
re-set it back to the "enter username", (or "enter password answer" as
the name's already entered), so they can try again. (Or even just show
a button which, when pressed, causes the same thing).
Any suggestions for how...
|
by: =?Utf-8?B?R2hpc3Rvcw==?= |
last post by:
Hi,
I collect hashed password in my BD. I give the opportunity to the user to
reset his password with the PasswordRecovery control. But, when he receive it
, it is a series fo strange characters like that ")(i5oA8&YPZB>Y"
How can I modify my webConfig to send human readable new password.
Tks
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| | |
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
