Administrator Password Reset Utility Script

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Here is a utility script to allow you to reset an Admin's password without using phpMyAdmin.

Code:

<?


/***********************************************************/


/* Just set $adminNameToReset to the admin name to reset   */


/* and save this file.  Call it anything you want, like    */


/* ResetPassword.php.  Then ftp it to the same folder where*/


/* mainfile.php is stored.  Then point your browser to the */


/* file. The password for that admin will be changed to    */


/* Password (note the capital P), by default. Then,        */


/* immediately log in and change your password!!! You      */


/* should then delete or rename this file!!                */


/* You can also change the password to something other than*/


/* Password by changing $newAdminPassword                  */


/***********************************************************/


/* Author: Gaylen Fraley  (Raven) 10/31/2003               */


/***********************************************************/


$adminNameToReset = '???';


$newAdminPassword = 'Password';





/***********************************************************/


/* You do not need to change anything below this line.     */


/***********************************************************/


include("mainfile.php");


$sql = "Select aid from ".$user_prefix."_authors where aid='$adminNameToReset'";


$result = sql_query($sql,$dbi);


if (!sql_num_rows($result)) {


   $mysqlError = mysql_error();


   if (empty($mysqlError)) $mysqlError = "<b>$adminNameToReset</b> appears to be an invalid user name.<br /><br />No updates have been made.";


   else $mysqlError = 'Unable to execute query.<br /><br />MySQL said <b>'.$mysqlError.'</b>.';


   die($mysqlError);


}


$sql = "Update ".$user_prefix."_authors set pwd='".md5($newAdminPassword)."' where aid='$adminNameToReset'";


$result = sql_query($sql,$dbi);


echo "Update successful!<br /><br />Your password has been changed to <b>$newAdminPassword</b>.<br /><br />Log in and immediately change it to protect your site!<br /><br />Also, be sure to remove this file or rename it!";


?>

Hangin' Around Joined: Dec 27, 2003 Posts: 45

Good Script, Thanks !. Wink

New Member Joined: Jan 31, 2004 Posts: 3

I changed the admin password by hand but it didn't work. Excellent script you wrote, gonna come in handy, but - I still get the 'Begone' message.

Now, why is that?

Posted: Sat Jan 31, 2004 9:41 am

When you change the password by hand, using phpMyAdmin for instance, you have to also select the MD5 option from the drop down box beside the password before you save it.

You are probably receiving that Begone message because the username is not matching a valid author name in the nuke_authors table. Usernames can only contain a-zA-Z0-9_- .

Posted: Sat Jan 31, 2004 9:50 am

That must be it, I used brackets as the community members wear tags. Cheers Smile

Posted: Sat Jan 31, 2004 10:21 am

That can easily be modified if you need to. In auth.php and modules/Your_Account/index.php the changes involve just 1 line. In auth.php modify this line

Code:

if (ereg("[^a-zA-Z0-9_-]",trim($aid)))

to

Code:

if (ereg("[^a-zA-Z0-9_-\[\]]",trim($aid)))

Then in modules/Your_Account/index.php modify this line

Code:

if ((!$username) || ($username=="") || (ereg("[^a-zA-Z0-9_-]",$username)))

to

Code:

if ((!$username) || ($username=="") || (ereg("[^a-zA-Z0-9_-\[\]]",$username)))

If you come across any other name checks, just modify them the same way.

Posted: Fri Aug 12, 2005 7:53 pm

This is just a reminder for the new people and the old ones that can't remember ROTFL

New Member Joined: Aug 16, 2005 Posts: 6

Topic edited as has no relevance

Posted: Tue Aug 16, 2005 12:48 pm

There is no redirection. You save the file and load/ftp that file up and then point your browser to it. Follow the prompts.

Posted: Tue Aug 16, 2005 1:38 pm

Topic edited as has no relevance

Posted: Tue Aug 16, 2005 2:36 pm

http://www.ravenphpscripts.com/postp44953.html

New Member Joined: Jul 28, 2006 Posts: 1

wow Raven that pass script saved my but big time when i tryed to change the god account pass in edit admins it said info saved but then when i tryed to log in as admin my new pass or old pass didnt work i thought i was screwed and would have to delete the database table nuke_aurthers but this script tottaly worked right the first time your knowlage of php is great and thanks for being so important to the nuke comunity

Posted: Fri Jul 28, 2006 8:48 am

Involved Joined: Apr 05, 2006 Posts: 263

thx Amigo, i luv your search box lol

Regular Joined: Nov 03, 2007 Posts: 52 Location: Nagalim

Very handy thanks Raven Smile

Posted: Thu Jan 24, 2008 1:09 pm

You're welcome Wink