Somewhere, I came across an article full of things to criticize. It was on a site called XOOPS Seminar Notebook.
Measures to take when you have forgotten the password for the site administrator account.
If there are multiple accounts with administrator privileges, log in with another account and change the password from the user-management screen.
Why does the password re-notification feature exist, then? :hammer:
If there is only one site administrator account, you will need to rewrite the data in the database.
• Convert to an MD5 value
Passwords are not stored in plain text, but are encrypted with MD5.
First, convert the new password you want to set to an MD5 value.Please use the form at the following URL.
http://naokoueda.com/koeda/index.php?plugin=md5
Enter the keyword and click the compute button.
Uh, why should one have to enter a password in a place like that? It can be done with one click in phpMyAdmin, which comes up later. Are they collecting passwords or something?
The following illustration shows the value obtained when converting the string “pass.” Copy it.
• Enter the password in phpMyAdmin
Log in to phpMyAdmin, open the xoops_users table, and click the Edit button for the applicable user. The user set during installation has a uid of 1.
Paste the copied MD5 value into the pass field and click the Execute button.
Even if you were editing xoops_users directly, if you are using phpMyAdmin it already has an MD5 conversion function. When editing the pass field, I think it would be enough to select MD5 from the function menu… orz
Still, if you call yourself “XOOPS Seminar Notebook,” I would at least like you to run the site or blog on Xoops as well.
Related posts
I Tried Installing OpenPNE
I tried installing OpenPNE, which is well known as a Mixi look-alike. Having used it, I find it very stable. It even makes me consider moving…
I Heard the Striking Question, “Why Do We Need Access Tokens? Couldn’t We Just Store Passwords?” So Here Is an Explanation
One reader of the ID book asked the striking question, “Why do we need access tokens? Couldn't we just store passwords?” Come to think of it,…
Is Authentication with OpenID Really Scary?
Via an article by ZIGOROu, I came across mitani1207's diary entry, "The Truth Is, Authentication with OpenID Is Scary". This is probably a fairly common reaction,…