Cannot Log Into Website

This is an open forum for any mojoPortal topics that don't fall into the other categories.

This thread is closed to new posts. You must sign in to post in the forums.
3/1/2010 2:48:45 PM
Gravatar
Total Posts 10

Cannot Log Into Website

Last night I was making a few security updates to the site after the design phase was finished. I decided that passwords in the database should no longer be saved in plain text as this is insecure. I choose the option to encrypt but still allow retrieval of passwords. Now when I or any user tries to log in it says that the login fails. Is there anything we can do or did we just loose a whole project?

3/2/2010 6:27:19 AM
Gravatar
Total Posts 18439

Re: Cannot Log Into Website

Hi,

It can be dodgy changing password format, if the application recycles during the process it may not complete. It is best to choose a format in the beginning when there are only a few users and then stick with it. Definitely a good idea to backup the database before trying to make such a change so you have a way to restore it if something goes wrong.

To solve it you first need to asses the problem by looking in the mp_Users table in the Pwd field.

Are any of the rows encrypted?

How many users are we talking about?

You could get back to clear text if there are only a few users it will be easier.

1. UPDATE mp_Sites SET PasswordFormat = 0 -- optionally a WHERE SiteID = yoursiteid

2. UPDATE mp_Users SET Pwd = 'ChangeMe'

3. Touch Web.config to clear the cache and reload site settings

4. Now you are back to clear text, have your users sign in immediately and change their passwords from 'changeme'

5. Backup your database

6. clear the mojoportal log

7. try the password format change again, if you continue to have trouble check the mojoportal log for related errors.

Hope it helps,

Joe

3/12/2010 2:52:43 PM
Gravatar
Total Posts 10

Re: Cannot Log Into Website

Hey I apologize for taking so long to get back to you. Thank you very much for the help your method worked great to get the accounts up and running again.

You must sign in to post in the forums. This thread is closed to new posts.