- Resetting the password with lostpassword didn't work for me, i edited it to be http:// and not https:// as it is in lostpassword.php.
It even ruins the password, even the old password stops working. What should i do ?
I think it is because lostpassword.php uses sha256 encryption and the login.php uses the $salt thing ?
lostpassword.php, line 53 must be like:
$result = mysql_query("UPDATE webUsers SET pass='".hash("sha256", $pass.$salt)."', accountFailedAttempts = 0 WHERE username='$resetUsername' AND emailAuthPin='$resetAuth' ");
thanks .
The only problem left is in changing the password , any idea ? It doesn't recognize that i inserted my current password ...