Re: [phpesp-dev] Problems authenticating respondents and other issues

[James E. F. <jf...@ac...>]

On Thu, 9 May 2002 fl...@gm... wrote:

> i had problems like that but happend on netscap 4.9.
> MAC /phpESP 1.3 i just deleted the user and placed the
> same username und password as new entry...... WORKS! as
> well swiching beetween user and admin account always
> bit buggy! i need to close the browser, and with that i
> can imaging that there a mistaks when using https...
>
> i did not check if the password has changed in any
> reason... seems to bee there is no chance to decode
> that so nexttime i will check the results/entrys..in
> the DB
>
> mayby changing the password authentification for
> users... this one is really secure.. but i wanted to do
> an USER-LOST-PASSWORD feature.... grrr but just an
> resetting and rewriting the resetted PW is possible ,
> well

You could make a new authentication handler. Copy the
default one and modify it so that it stored passwords in
plaintext, or using reversable encryption. That way you
could recover passwords.

A better solution might be to have a page that a user could
enter their username and email address, and if that user
existed create a random password for them, and email it to
them. That way, you still have encrypted passwords in the
DB, but a user can reset it without admin intervention.

-James