Admin Password recovery

[joebrochin]

Does anyone know how to change or recover the admin password on an AD directory?

I have one that Jodi installed some time back, but never did anything with the directory, but now I have decided to go the niche route and really focus on it, but can't remember the password and I cant seem to get Jodi to answer e-mail.

[Denise]

Oh no! I have no idea, sorry.

[GardenSimply]

Joe,

Sorry, been a bit AWOL. We had a new grandson this week and it's a crazy house here. Sending you an email.

The AD forum is closed down for the time being, I am trying to decide if I should post some answers to issues here for now...

[joebrochin]

Hi Jodi,

It was good to hear from you on e-mail and happy to hear the grandbabe is doing good.

If the forum is down at AD then they are not fulfilling a need that owners may have so go for it and fill that need.

[GardenSimply]

Joe,

I got the okay from the AD owners to put up some Q & A section, so I'll be getting that set up soon.

You got into admin okay, right?

[joebrochin]

I sure did, thanks

[Bill.Platt]

Jodi,

I need help from someone smarter than me.

At one point, I had forgotten my admin password. So, I went into the mysql and deleted the password to blank. My thinking was that blank in the mysql would translate into the blank in the password box. Wrong!

I just built a new AD directory, and copied the new password from the new site's mysql to the mysql in the original AD site. That does not work either.

It seems that they have some kind of encoding in place, using a domain specific encoding to come up with the appropriate password storage string for mysql. I even tried a one-letter password, and that still translates into a huge string of code in mysql.

The only choice I see left is to reinstall the dashboard software on the original domain and hope it does not foul up my customization on that site.

p.s. I do all article approval from software that I programmed separately, so the only feature I am missing access to is the email members function, and that is what I am hoping to gain access to.

Any insight you could give me for solving this issue would be most appreciated.

Bill Platt

[Bill.Platt]

Jodi,

I tried your Admin Login Fix at: http://www.adinstall.com/downloads/ and I still cannot get passed this problem. I even tried building a second copy of Dashboard on the same domain and copying the password string from the new db to the old one. Still not success.

Don't you have another Dashboard management software that can be plugged into the backend of a dashboard site?

Thx,
Bill

[GardenSimply]

Bill,

This can be frustrating. I have run into it with many scripts, including WordPress, Drupal, etc... once you have an encoded password, then you can use it over and over.

Use this in the database, it is the encoded password for 'temppass' (without the quotes)

e5f0f20b92f7022779015774e90ce917

AFTER you make this change in phpMyAdmin, then use the built in 'changepassword.php' file to change the password to what you'd like. After doing this, I would go back into phpMyAdmin and copy and paste the encoded password, so if anything gets corrupted again, you can always use the encoded password you have to login. Another good thing to do (with any script) is to keep good copy of the script to replace any files that get corrupted. It can happen to any file that gets uploaded to a server.

Let me know if you have any problem with replacing this now.

[Bill.Platt]

Jodi,

That did not work either.

Strangely, if I use a wrong password, it punts back a Incorrect Login error message.

But, when I use the right password, it automatically kicks me back to the Member Login page and asks me to login.

Does this sound like anything you have seen before?

Bill

[Bill.Platt]

Jodi,

I got back into the admin of that site, by installing the admin folder from the Dec 2005 build.

Bill

[merger]

Hi , should you like to reset your admin password there is a script called Adar that does this.
Or edit your sql in phpmyadmin with "21232f297a57a5a743894a0e4a801fc3" which = admin
You can also change the user name admin to whatever you want.
Here is the file in complete,, do remember to delete it and change your password after.

Take a look in your sql under admin
You will find two records. The second defaulted to admin and admin.
Copy your real login information to the second record as added sequirity to the sql injection problem.
Warning ::: Do not delete the second record as the AD script checks for it.

<?php

include("setup.php");

$link = mysql_connect($dbhost, $dbuser, $dbpasswd) or die ("Could not connect to database");

mysql_select_db ($dbname) or die ("Could not select database");

// Empty the admin table
$result=mysql_query("TRUNCATE TABLE {$table_prefix}admin");

// Create a new admin with new password
$result=mysql_query("INSERT INTO {$table_prefix}admin (adminid, password) VALUES ('admin', '21232f297a57a5a743894a0e4a801fc3')");

?>

<link rel="Stylesheet" href="<?php echo "http://$_ENV[HTTP_HOST]"; ?>/mainstyle.css" type="text/css"

<td class="maincontentcell"> <!-- Starting of Main Content -->

<table border="0" width="100%" height="65%">
<tr>
<td width="20%">&nbsp;</td>
<td width="60%"> <hr size="1" noshade width=95% align=center >
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td valign="top"><img src="<?php echo "http://$_SERVER[HTTP_HOST]"; ?>/images/redinfo.gif" width="16" height="16" border="0" hspace="8"></td>
<td valign="top" class="articletext">
<li>Admin update complete.</li>
<li><a href=<?php echo "http://$_ENV[HTTP_HOST]"; ?>/admin/>Go to Administrator Panel.</a></li>
</td>
</tr>
</table>
<hr size="1" noshade width=95% align=center >
</td>
<td width="20%">&nbsp;</td>
</tr>
</table>


</td> <!-- End of Main Content -->


<?php

// Delete the file for security
unlink($_ENV[SCRIPT_FILENAME]);

?>