...

View Full Version : lost passwords



sagat
08-27-2004, 03:38 PM
In my access database i have 2 tables called seceret question and secret answer. I would like to provide users with thier passwords without using emails. There would be a screen where they can enter thier username, secret answer then thier password will be displayed on the screen. Or alternatively they could just enter thier username and thier password is displayed. any ideas?

thanks

Roy Sinclair
08-27-2004, 08:27 PM
And the problem/question is? I'm pretty sure you want something from us but it's not real clear what it is that you want.

Morgoth
08-27-2004, 09:31 PM
Roy is right, it's a little unclear.

I assume you want us to tell you what the best method for retrieving lost passwords would be. That's a question that will only get you opinions, I don't know if there is a best way to do it, and it looks like you don't want to use e-mails.

Here's what I would do without using e-mail:
My suggestion is not to use 2 new tables, but use your Students table with their username, password, firstname, etc... in it.
You will also have two new fields, "secretQ" and "secretA" where you will store your secret question, and your secret answer.

You will make a new page which will be your password retrieval page.
You will get them to type in their username and firstname, hit submit. If the username and firstname can not be matched in the database redirect to another page.

If the username and firstname match in the database this second page will display the secretQ. They will type in the secretA, if they get it wrong, kick them, if they get it right show their password to them.

This is simple, but to make it bug and hack free you will need to impliment some safety protocols.

sagat
08-28-2004, 12:21 AM
just a simple script that displays the password once you submit your username. I have done a similar stuff using coldfusion

BuddhaMan
08-28-2004, 01:40 PM
So I could type in someone elses username and see their password without answering the sekrit question?

Morgoth
08-28-2004, 09:19 PM
just a simple script that displays the password once you submit your username. I have done a similar stuff using coldfusion
That's not very safe, I would have to agree with BuddhaMan.

So I could type in someone elses username and see their password without answering the sekrit question?

The idea of having a secret question is that it can't be answered by anyone by the person the knows the answer (the user that wrote it)

Either that, or ask for some personal information, like first and last name, along with age, or address. What ever is in the database that is seen by no one but the user that owns the account.



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum