Admin password problem

[spiritfolk]

Ok, i changed my admin password via the admin area but when i attempted to login it said "Invalid username or password"! I have gone into my CPanel/myphpadmin and changed the password that way, but i still cannot login. I just want to mention that the original password in PLD_USER looked to have been encrypted before changing the password again.

Please can someone help me as i am a little stumpted at the moment :?

[VSDan]

1. Via phpMyAdmin, delete password correponding to your adminstrative username in the PLD_USER table.

2. Login to phpLD admin - enter username, but leave password blank.

3. Via phpLD admin > System > Profile
change your password.

Should do the trick.

[David]

And here is a more "hacker style" method:
{topic moved or deleted}
You can type in a word and it will tell you the md5 hash which can then be inserted thru phpMyAdmin.

Pretty scary, eh?

[VSDan]

Scary for sure, thanks for that, David!

As an aside, I have never been a great fan of protecting script admin control panels (or membership areas for that matter) by any other means other than .htaccess. I always add .htaccess password protection in addition to the default authentication scheme - for example, my phpLD control panel. Plus, I use Apache 'deny/allow from' directives to limit access to only my IP. Plus, I usually rename the admin directory to something random and meaningless to hide from the foul beasts. You can never have enough hoops to jump through to be as secure as possible. Nine years later, and only once has a hacker gained unlawful access to the server - and this was due to security vulnerability in Apache, which my tech guy detected within minutes and quickly ran rootkit and then reinstalled new version Apache =)