Hashsalt


https://forum.kartris.com/Topic1539.aspx
Print Topic | Close Window

By TheCalicoTree - Thu 19 Jan 2012
Does anybody know if you can retrieve a hashsalt?

I think I have overwritten my web.config with a test hashsalt and cannot now sign in to the system.
By Neil - Fri 20 Jan 2012
I believe you can reset your login using the datatool.
By TheCalicoTree - Fri 20 Jan 2012
Thanks Neil,

I have downloaded the data tool. It is prompting me for a .MDF file. I do not have one for my database and there is no mention of this is any of the documentation. Any ideas?
By Paul - Fri 20 Jan 2012
Yes, I don't think it is possible to recover the hashsalt if it is lost, but admin passwords can be recovered:

http://www.freeaspnetcart.com/Topic100.aspx

Customer account passwords are also hashed, so you will find customers logging in would also find their old passwords no longer work with a new hashsalt in place. But they can request reset emails from the site on next visit.
By Paul - Fri 20 Jan 2012
Also, as Neil points out, it is possible to reset admin password with the data tool too. But this requires connecting to the SQL database. On shared hosting you should have the following to let you do this:

IP/address
username
password

If you have your own server with full admin access, you can put the data tool on the server itself and then generally connect to the SQL server with localhost\sqlexpress as the address (assuming you're on Express) and then 'windows authentication'. Don't click the instance checkbox and it shouldn't require an .mdf file.

You'll need to browse to the web.config file so the data tool can use the hashsalt in that to hash the admin password to the database.
By TheCalicoTree - Tue 24 Jan 2012
Thanks for your responses. In the end I was thankfully able to restore the web.config from my server backup.

I have also saved a copy of my web.config elsewhere so that the same mistake cannot happen twice.