Get unencrypted user password

For general questions and discussions specific to the AbleCommerce 7.0 Asp.Net product.
Post Reply
mangrur
Ensign (ENS)
Ensign (ENS)
Posts: 2
Joined: Fri Jun 06, 2008 1:50 pm

Get unencrypted user password

Post by mangrur » Fri Jun 06, 2008 1:52 pm

Is it possible to get the unencrypted password of a user? My guess is no as that would be a security hazard, but i wanted to verify.

cheers
rajin

User avatar
jmestep
AbleCommerce Angel
Posts: 8164
Joined: Sun Feb 29, 2004 8:04 pm
Location: Dayton, OH
Contact:

Re: Get unencrypted user password

Post by jmestep » Fri Jun 06, 2008 4:02 pm

In Able 5.5, we were able to go to marketing--> send email--> select a user--> select to send lost password email and then preview the message. I haven't found anything in Able 7yet.
Judy Estep
Web Developer
jestep@web2market.com
http://www.web2market.com
708-653-3100 x209
New search report plugin for business intelligence:
http://www.web2market.com/Search-Report ... -P154.aspx

mangrur
Ensign (ENS)
Ensign (ENS)
Posts: 2
Joined: Fri Jun 06, 2008 1:50 pm

Re: Get unencrypted user password

Post by mangrur » Fri Jun 06, 2008 4:06 pm

Thanks for your quick reply Judy. So it seems if a user forgets their password, the only option right now is to reset it through the admin, then user can log in and change it; is that correct?

rajin

Mark Harris
Lieutenant, Jr. Grade (LT JG)
Lieutenant, Jr. Grade (LT JG)
Posts: 37
Joined: Fri Mar 28, 2008 3:50 pm
Location: Perth, Western Australia
Contact:

Re: Get unencrypted user password

Post by Mark Harris » Sat Jun 07, 2008 1:03 pm

There was some code posted for the password generation, and if i remember it correctly - it's single direction, not something you can decrypt.

User avatar
jmestep
AbleCommerce Angel
Posts: 8164
Joined: Sun Feb 29, 2004 8:04 pm
Location: Dayton, OH
Contact:

Re: Get unencrypted user password

Post by jmestep » Sat Jun 07, 2008 2:36 pm

Mangur,
Either that or they should be able to send themselves a forgot password email.
Judy Estep
Web Developer
jestep@web2market.com
http://www.web2market.com
708-653-3100 x209
New search report plugin for business intelligence:
http://www.web2market.com/Search-Report ... -P154.aspx

User avatar
Logan Rhodehamel
Developer
Developer
Posts: 4116
Joined: Wed Dec 10, 2003 5:26 pm

Re: Get unencrypted user password

Post by Logan Rhodehamel » Tue Jun 24, 2008 1:45 pm

Just to follow up, in AC7.0 the password is one direction only. We use a salted SHA1 hash, there is no way to get the original text back.
Cheers,
Logan
Image.com

If I do not respond to an unsolicited private message, it's not because I'm ignoring you. It's because the answer to your question is valuable to others. Try the new topic button.

Post Reply