RE: SOT - adding password forgot function to Mura CMS

2011-05-27 Thread cfcom
Correction: it appears that Mura hashes the info in the database First, sorry for the SOT The current version of MURA does not have a 'forgot password' feature. It only gives the user a 'reset' All the emails/passwords are encrypted in the database Does anyone have a suggestion on how to add

RE: SOT - adding password forgot function to Mura CMS

2011-05-27 Thread DURETTE, STEVEN J (ATTASIAIT)
Current security practices believe this is a bad idea. If you could do that then as the person running the site you would be able to get access to all of your users passwords. The password reset feature is safer. The user pick the password and the system hashes it, that is all that is saved and

Re: SOT - adding password forgot function to Mura CMS

2011-05-27 Thread Dave Watts
The current version of MURA does not have a 'forgot password' feature. It only gives the user a 'reset' All the emails/passwords are encrypted in the database Does anyone have a suggestion on how to add a traditional 'forgot password' feature that will query the db and return the info