Pls Provide me business logic method for reset password or forget password by user id...

User 13642228

OriginalGriff

It doesn't quite work like that. We do not do your work for you. If you want someone to write your code, you have to pay - I suggest you go to Freelancer.com and ask there. But be aware: you get what you pay for. Pay peanuts, get monkeys. The idea of "development" is as the word suggests: "The systematic use of scientific and technical knowledge to meet specific objectives or requirements." BusinessDictionary.com[^] That's not the same thing as "have a quick google and give up if I can't find exactly the right code". So either pay someone to do it, or learn how to write it yourself. We aren't here to do it for you.

Bad command or file name. Bad, bad command! Sit! Stay! Staaaay... AntiTwitter: @DalekDave is now a follower!

User 13642228

ohh sorry for that by the way can you provide me idea how can we implement method for that... if possible otherwise its ok! 😊

Mukthahar Shaik

in order to reset password you have to give email link or else you can give direct web page link. before reset password. you should take email address from the user. so you can use in where clause. see my code:

  protected void save\_Click(object sender, EventArgs e)
{
    if (password.Text != "" || confirmpassword.Text != "")
    {
        if (password.Text == confirmpassword.Text)
        {
            con.Open();
            SqlCommand cmd = new SqlCommand("update login set password='" + password.Text + "', confirmpassword='" + confirmpassword.Text + "' where email='" + Session\["email"\] + "'", con);
            cmd.ExecuteNonQuery();
            con.Close();
            Label1.Text = "Password Reset Successfully";
            HtmlMeta meta = new HtmlMeta();
            meta.HttpEquiv = "Refresh";
            meta.Content = "5;url=loginuser.aspx";
            this.Page.Controls.Add(meta);
        }
        else
            Label1.Text = "Password not Matched";
    }
    else
        Label1.Text="Please Enter Password";
}

ask email our username. then display password reset webpage. use email or username in where clause to update password. i hope you will understand.

Mukthahar Shaik

in order to reset password you have to give email link or else you can give direct web page link. before reset password. you should take email address from the user. so you can use in where clause. see my code:

  protected void save\_Click(object sender, EventArgs e)
{
    if (password.Text != "" || confirmpassword.Text != "")
    {
        if (password.Text == confirmpassword.Text)
        {
            con.Open();
            SqlCommand cmd = new SqlCommand("update login set password='" + password.Text + "', confirmpassword='" + confirmpassword.Text + "' where email='" + Session\["email"\] + "'", con);
            cmd.ExecuteNonQuery();
            con.Close();
            Label1.Text = "Password Reset Successfully";
            HtmlMeta meta = new HtmlMeta();
            meta.HttpEquiv = "Refresh";
            meta.Content = "5;url=loginuser.aspx";
            this.Page.Controls.Add(meta);
        }
        else
            Label1.Text = "Password not Matched";
    }
    else
        Label1.Text="Please Enter Password";
}

ask email or username. then display password reset webpage. use email or username in where clause to update password.

if you want id then use sql query like

select id from userDetails where email=session["email"];

i hope you will understand.

User 13642228

thanks, Ya I understood... you have well explained!😊

Mukthahar Shaik

you are welcome

Lost User

Everything about that is just so wrong.

Lost User

... and if you follow that advice your entire system is open to every hacker in the world.

Mukthahar Shaik

yes you are Richard. always use parameterized query.But i used this code for my college project. so i wrote like this. my suggestion also. go with parameterized query to protect from sql injection.

Pete OHanlon

Please tell me you know why this is wrong. Have a read up about subjects like SQL injection and security best practices.

This space for rent

Mukthahar Shaik

yes you are right Richard.

always use parameterized query. i used this code for my college project. so i wrote like this. my suggestion also go with parameterized query to protect from sql injection.

Lost User

And you are also storing passwords in clear text, one of the most dangerous things to do. It does not matter that you are doing this as a college project. Do it right first time and you are less likely to fall into these traps when you are doing it for real. Quite frankly if you offered that as a sample of your work in a job interview you would be discounted immediately.

Richard Deeming

Let's see: SQL Injection. Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^] How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^] Query Parameterization Cheat Sheet | OWASP[^] Storing passwords as plain text. Secure Password Authentication Explained Simply[^] Salted Password Hashing - Doing it Right[^] Letting anyone reset any password just by providing an email address. And probably several other severe security vulnerabilities which I haven't immediately spotted. Don't do it like this - not even for a simple demo or college project. Troy Hunt: Everything you ever wanted to know about building a secure password reset feature[^]

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

Richard Deeming

Troy Hunt: Everything you ever wanted to know about building a secure password reset feature[^]

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

User 13642228

Ya Kind of it make sense...