DotnetNuke password reset link - asp.net

I am using DotNetNuke 6.2.6 , and recently got stuck in one issue , I do not want my users to receive random password after they reset their password (forgot password), Instead I want to send them password reset link. I could not find any settings under Web.Config or under host settings. I did some research but the articles I found that referred to DNN7 . On DNN website I found only this link http://www.dnnsoftware.com/wiki/page/password-reset-links. Registration mode is verified.

I think that you will need to upgrade to DNN 7 to get this functionality.
Iowa Computer Gurus (iowacomputergurus.com) has a module that provides this functionality if you are not able to upgrade.

Related

Not able to log into wordpress website.... self hosting on Azure

When I try to sign into my websites wp-admin login screen it refreshes and redirects me to the login page. After researching this issue it looks like deactivating the plugins should fix the issue. However, when I try doing this from phpmyAdmin, it tells me that the UPDATE command is denied to user.
I have tried using the FTP client 'Fire FTP' to try and access my files but I do not know which username and password needs to be used (I have about a million at this point).
Is there somewhere in the Azure portal where I can edit my files and deactivate the plugins?
Other information: I accidentally deleted the file the had my Wordpress admin password, but I am able to log into Azure, and phpmyAdmin. I also have my cPanel login information but I cannot figure out how to access that either. I am also using a Mac.
Please help! I have a basic understanding of web development but not much and I have worked incredibly hard on my website business but this has been a rough setback.
Looking at your problem, FTP is your best option. You can define the user/password at the portal in your app service blade:
Login into the portal: https://portal.azure.com
Navigate to your app service blade
Look for Deployment Credentials and set your username/password.
I was able to resolve this. Turns out I had exceeded my database storage. Simply upgrading my plan fixed the issue. So if anyone sees this and has the same problem, make sue that your SQL db has enough storage available.
The plugins made me exceed my storage but I did not need to deactivate them.

DNN Wrong Password Reset link

I have problems when I force reset passwords for my website users.
When I use this option, the next time the user logs in it will be prompted to change the password. My website link is something like this: Server/MyPortal.
When users login instead of taking them to:
Server/MyPortal/default.aspx?ctl=PasswordReset&resetToken...
They are redirected to:
Server/default.aspx?ctl=PasswordReset&resetToken...
Which obviously takes them to a 404 not found page because it is missing MyPortal.
Can anyone please shed some light on me and help me to fix this? Thank you very much!
Ivan
What version of DNN are you on?
I would look at
Are you on the latest version
Are your Portal Aliases configured properly. To tell this, login as a Super User, go to the Admin/Site Settings page for the portal in question, find the Portal Aliases section, I believe that is under the Advanced tab. See if you have a misconfigured alias in there.
Another thing you might check, would be to check the Language files (admin/languages) to see if the password reset email could be modified there to include the proper portal URL. When editing language files in DNN you can edit System, Host, or Site.
You likely want to edit the SITE level if you have other websites running as well. Site level edits will only apply to that individual portal.

Reset password on WordPress deployed to Azure

I have created a WordPress site on Windows Azure using the gallery.
I understand that Azure sites do not have SMTP capabilities.
How do I do a password reset on a WordPress site if it can't send email? I know that I can specify an SMTP server (like Gmail) in the WordPress settings and/or with a WordPress plugin. But I have to be able to login to do that.
It seems like WordPress site installs from the gallery are not completely functional because of the lack of a password reset option. Is there any other way to do this that I'm missing?
Actually you could use SMTP on WordPress in Azure by adding a plugin for configure the SMTP service. These are two of the plugins you can find. Personally i have tested configure-smtp and is working very well. Give a try to it and leave feedback.
http://wordpress.org/extend/plugins/configure-smtp/
http://wordpress.org/extend/plugins/wp-mail-smtp/
If all you need is access to your wordpress administration - so that you can install additional plugins that will give you the option you lack then you can update your password dirctly in the database.
see this codex page:
http://codex.wordpress.org/Resetting_Your_Password#Through_MySQL_Command_Line
Starting with MySQL version 5.x you can also run this command:
"UPDATE (name-of-table-you-found) SET user_pass = MD5('"(new-password)"') WHERE ID = (id#-of-account-you-are-reseting-password-for);" (actually changes the password)
also this page has some info about azure and sending e-mails:
How can i send an Email using PHP at windows Azure?

reCaptcha locked me out of my Drupal website. Unable to login

I am developing a website using Drupal 6 and I enable the reCaptcha module to check its functionality. It now redirects me to the google recaptaha page : https://www.google.com/recaptcha/admin/create
I am not sure of the exact process and I have not set the keys yet, which I can do only if I can get access to my site. I am not able to login and even disable the module. Based on the suggestion on Drupal forum, I accessed the database and disable the module from the system table but I still get the redirection. I cleared all the cache tables in the MySQL database but still the same. What should i do to get access and disable the module? Is there any good tutorial/video to set the reCapthca module?
Try the following:
1. Clear your browser cache and cookies
2. Check with different browser
backup the recaptcha row from the system table.
delete the recaptcha row in the system table.
That should disable the module.
if still give the same error please access your drupal website cron job url
the link will look like
http://www.yoursite.com/cron.php

Drupal 7 security implementation

I have a hostgator website on which I installed Drupal. It was working fine until last weekend. I am primarily a .net developer and am not sure about the configuration of this open source application.
Recently, I noticed a large number of user accounts being created who never even logged in before. So, after setting up Google analytics, I determined that my site was hacked. I made this determination because the majority of the traffic and user flow is coming form RUSSIA, SERBIA and ROMANIA, hackers haven!
I realised that my website was not secure. So now I put the site into mainitainance mode, uninstalled the existing Drupal 7, and installed a new installation. It is very fresh now and I am on a mission to find some good security pratices.
I would like to know what security measures that I can implement other than these.
Also, how would I connect to my website's command line to change the file permission settings? Currently, I am using Filezilla and right clicking to change the properties.
Thanks, and apologies for the long question.
P.S. This is my website.
Hostgator provides SSH access. Use tool like WinSCP to transfer files and PuTTy to access command line. Once you get command line access, you will be hopefully able to install Drush on Hostgator. Drush will help you do many administrative stuff using command line and it is highly recommended to use. Since you are a .Net developer, I assume that you might be using Windows for development. Good news is that you can install Drush on Windows too.
Are you sure that your site was really hacked? Because, if you go to Account setting page (http://your-site/admin/config/people/accounts) and look under Who can register accounts?, you will see three options there. The default is "Visitors can create account". If you do not change this setting to something else, your new site will again face the same problem. Otherwise, you can select option Require e-mail verification when a visitor creates an account.
Another way to reduce number of spammers creating account on your Drupal site is to install CAPTCHA or reCAPTCHA module and configure it to show challenge to users when they create an account. This will block many spammers. You can also block specific IP range using Apache .htaccess file. You will find .htaccess file in your Drupal installation folder.
Another good practice is to periodically update Drupal core and contributed modules for security fixes. If you goto page admin/reports/updates, you will see what module requires an update. Command line and Drush will help you streamlining some part of this process.
If you regularly update Drupal (core & modules), use SSH for file transfer and apply correct file permissions, your site should be all secure. It is not that hard to maintain a secure Drupal site, given all the help is available for Drupal security team and Drupal community.
There is a Drupal Group (forum) that deals with Best Practices in Drupal Security that provides a number of excellent suggestions on how to secure Drupal sites. As for accessing your site via the command-line, I checked and Hostgator allows for SSH access on all of their hosting plans. You should be able to login via SSH, change to the sub-directory within your Drupal installation and change the permissions of a file or directory using the 'chmod' command.
Good luck!

Resources