Quote from: mich on September 01, 2011, 12:01:26 PM

Quote from: sareea on September 01, 2011, 10:24:40 AM

- Resetting the password with lostpassword didn't work for me, i edited it to be http:// and not https:// as it is in lostpassword.php.
It even ruins the password, even the old password stops working. What should i do ?
I think it is because lostpassword.php uses sha256 encryption and the login.php uses the $salt thing ?

lostpassword.php, line 53 must be like:
$result = mysql_query("UPDATE webUsers SET pass='".hash("sha256", $pass.$salt)."', accountFailedAttempts = 0 WHERE username='$resetUsername' AND emailAuthPin='$resetAuth' ");

Yeah it works now

thanks .

The only problem left is in changing the password , any idea ? It doesn't recognize that i inserted my current password ...