Nuke Toolbar

          
Quick Links 
 [Home Page ][ Category Listings ][ Forum Listings][ Forum FAQs]
[ HomeDNS - Domains ]  [ Nuke Resources ]  [ Nuke Skins and Themes ]  [ Nuke Sites Link Directory ]
[ LearningLinux.com ]  [ Nuke Fixes ]
[ NukeZone Hosting ]  [ Domain Name Database ]
Nuke Forums Forum Index

Nuke Sites Link Directory


password help
Goto page 1, 2  Next
 
Post new topic   Reply to topic    Nuke Forums Forum Index -> PHP Nuke Security
View previous topic :: View next topic  
Author Message
bgbs
Staff Sergeant
Staff Sergeant


Joined: 27 May 2003
Posts: 31


PostPosted: Sun Nov 16, 2003 12:54 am    Post subject: password help Reply with quote

Hi, is there any way I can view this sql password?
Its my phpnuke account and in sql database in nuke_users it lists encrypted passwords. Is there a simple way to decipher that?

72122ce96bfec66e2396d2e25225d70a

Let me know, thanks.
Back to top
View user's profile Send private message
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Sun Nov 16, 2003 2:08 am    Post subject: Reply with quote

No, there is no simple way to decipher this. This is the MD5 hash of the password. You can read about the algorithm in RFC 1321.

But why are you asking? Did someone forget his password? If so, you can do the following:

Using phpMyAdmin (or directly in MySQL), go to the nuke_authors table and make your pass dc647eb65e6711e155375218212b3964 - that will make it Password, then just login and change it. See I deleted my Super Admin. How do I get him back? .
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Mon Dec 15, 2003 2:20 pm    Post subject: password help Reply with quote

Hello,

I'm trying to change the password for my admin menu. I have found nuke_authors and see the hash of the password. I also see instructions for how to change the password to "password". If I then want to change it from "password" to something else, how to I know the proper encription? Is there an easy way to do this for someone who does not know php?

Any help would be greatly appreciated!
Back to top
View user's profile Send private message Visit poster's website
chris-au
President
President


Joined: 16 Aug 2001
Posts: 1842
Location: Australia

PostPosted: Mon Dec 15, 2003 7:52 pm    Post subject: Reply with quote

A simple way?

Code:
<?php
$pass="balblah";  //<---change that to what you think it should be!
   $new_password = md5($pass);
print("NEW CODE = $new_password");
?>
Back to top
View user's profile Send private message Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Tue Dec 16, 2003 3:54 am    Post subject: password help Reply with quote

Where do you do this? I'm sorry but I have no idea where I might use this code.

I apologize but I don't know the first thing about php/sql programming and I'm new to php nuke. Perhaps this is more than I can hope to be able to accomplish but all I really want to do at this point is change the password at my admin screen. There are also other log in names with superadmin set to 1 that I was not aware of. We had a developer build this site for us and it has been left to me to decipher. I would like to change these passwords because I don't know how many people knew the passwords during the development of my site.

Can you help me in really basic terms? Do I need to pay someone to do this for me?

Any help would be greatly appreciated...
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Tue Dec 16, 2003 11:18 am    Post subject: Reply with quote

Upload the script of chris-au to you server, then point your browser to it. It will show you the MD5 hash for the password you entered in the code (in place of "balblah" in the code). Then copy that value and paste it in the password field.

Or use phpMyAdmin and choose the MD5 function from the dropdown list.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Tue Dec 16, 2003 11:24 am    Post subject: Reply with quote

BTW zettie, the above method is only recommended if you forgot the admin password and want to set it anew.

To change the admin password, point your browser to the admin.php file, log in as administrator with the old password, click on the "Edit Admins" icon, choose the admin whose password you want to change, click on "Modify" and change the password.


Last edited by chris on Tue Dec 16, 2003 12:19 pm; edited 1 time in total
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Tue Dec 16, 2003 12:15 pm    Post subject: password help Reply with quote

Thank you...I think that's where I am lost. I don't have an "edit admins" icon. I have preferences but nothing that allows me to change my password. Is there any other way?

Thank you...
zettie
www.skytoyz.com
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Tue Dec 16, 2003 12:24 pm    Post subject: Reply with quote

You don't have that

Edit Admins
Edits Users
Encyclopedia
Ephemerids
FAQ
Forums

line of icons in your administration panel?

Weird...
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Tue Dec 16, 2003 12:52 pm    Post subject: Reply with quote

I don't have "edit admins", but I do have:
back up database
banners
blocks
event calendar
edit users
myegallery
faq
forums
http referrers
messages
newsletter
optimize db
preferences
surveys/polls
weblinks
logout/exit
Is there a way to add this icon to my admin menu? I was just searching around in my ftp program and found authors.php under admin modules. Is there a place in this file where I can add code to add this icon to my admin menu? Just a shot in the dark...maybe I need to do something completely different.

Any help?
Thanks for everything already:)
zettie
Back to top
View user's profile Send private message Visit poster's website
chris-au
President
President


Joined: 16 Aug 2001
Posts: 1842
Location: Australia

PostPosted: Tue Dec 16, 2003 12:53 pm    Post subject: Reply with quote

There is another way of resetting the admin password.,
You wrote that you can access the table nuke_authors

If that is so, just EMPTY that table. DO NOT DELETE.

When you login again as admin you will be prompted for a name and password.
You should do that there and then but DO NOT MAKE ANOTHER USER WITH THE SAME NAME, that is very important.
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Tue Dec 16, 2003 2:49 pm    Post subject: Reply with quote

zettie wrote:

Is there a way to add this icon to my admin menu?


Well...no. It is added automatically. The only reason I can think of (besides a broken installation) is that you are logged in as an admin, but not as the "superadmin". Thsi is probably related to your wish to change the (super)admin password.

To make it short. follow one of the two ways that chris-au told you. Once you have changed the administrator ("God") password, you can login with that one, and you should see the missing icon.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Wed Dec 17, 2003 6:47 am    Post subject: password help Reply with quote

Mission accomplished.....I was able to successfully change all the passwords through phpMyAdmin! Thank you SO much for your help with this

However, I tried logging in under all aid's and I still don't have the edit admins icon. I don't think this really matters though, since I seem to be able to make appropriate changes through phpMyAdmin??

Thank you for your patience in walking me through this procedure..
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Wed Dec 17, 2003 8:46 am    Post subject: Reply with quote

I'm glad you finally got it working. But this missing "Edit Admins" link in your administration panel is disturbing. What version are you running? You see the version in the Statistics module (click on "Statistics" in the Modules block of the home page and read the resulting page carefully, you will see the version somewhere).

I don't think it's O.K. to be missing that link - unless something has changed in the newer versions and I am not aware of it.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Wed Dec 17, 2003 10:52 am    Post subject: Reply with quote

I don't see a "statistics" module. That's probably not good either. Now, would this be an icon on my admin.php page, or should it be in the left hand block under "modules". When I go to phpMyAdmin, I find nuke_stats_date (hour, month and year). I do not know what version I'm running, though it would be helpful info. It was installed in April 03. Can I find the version anywhere else?

Is it possible that the person who built our site for us deleted certain icons that he didn't think I would need?

Thanks again...
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Wed Dec 17, 2003 3:51 pm    Post subject: Reply with quote

It should be in the left hand blocjk with the title "Modules". If you don't see it, it may be deactivated. Go to the admin panel, click on "Modules", find the Statistics module in the table and click on the "Activate" link on that line. Then you should see it in the Modules block on the left.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
chris-au
President
President


Joined: 16 Aug 2001
Posts: 1842
Location: Australia

PostPosted: Wed Dec 17, 2003 4:27 pm    Post subject: Reply with quote

Quote:
However, I tried logging in under all aid's and I still don't have the edit admins icon. I don't think this really matters though, since I seem to be able to make appropriate changes through phpMyAdmin??


You should check in the folder/admin if the following files are there:

in folder 'case' there should be : case.authors.php
in folder 'links' there should be : links.editadmin.php
in folder 'modules' there should be : authors.php

These are needed to use edit admin

If you don't see images in the admin panel you have to activate those in:

admin/preferences and find :
Graphics Options
Graphics in Administration Menu? Yes No

I would suggest that you check the zip file for the version of phpNuke and see how many files there are in each section and compare that with your setup.
It seems that you might have missed some.
Back to top
View user's profile Send private message Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Thu Dec 18, 2003 5:28 am    Post subject: Reply with quote

AHA! That's it! links.editadmins.php was in a subfolder in links. I copied it and presto! it's now appearing in my admin screen.

That wasn't so bad. I've been really intimidated about making changes like that...

Thank you thank you thank you!!
Back to top
View user's profile Send private message Visit poster's website
chris
President
President


Joined: 06 Nov 2002
Posts: 1047
Location: Outer Space

PostPosted: Thu Dec 18, 2003 5:52 am    Post subject: Reply with quote

But why was it in that subfolder? Did you move it there? Are there more files there? Did the guy who installed it for you did this, as a "security measure"?
Back to top
View user's profile Send private message Send e-mail Visit poster's website
zettie
Corporal
Corporal


Joined: 15 Dec 2003
Posts: 15


PostPosted: Thu Dec 18, 2003 7:55 am    Post subject: Reply with quote

I have a feeling the guy who installed it did that, judging by the name he gave the subfolder. There are quite a few other files in that subfolder (ie encyclopedia, ephemerids, add story and others). Maybe he thought we couldn't be trusted with this responsibility (LOL). Maybe he's a control freak Maybe he wanted to charge us for additional functionality. He's out of the picture now though, and I do want to change some permissions so our staff can't go places where they're not supposed to go.

Thanks so much!
Suzette Bergeron
www.skytoyz.com
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Nuke Forums Forum Index -> PHP Nuke Security All times are GMT - 8 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group




Forum Options
Main Menu
index.phpForums Index
    - Collaped View
    + Expanded View
FAQFAQ
SearchSearch
MemberlistMemberlist
UsergroupsUsergroups
RegisterRegister
ProfileProfile
Log in to check your private messagesLog in to check your private messages
Log inLog in

Visitor Options
 
Subscribe
Unsubscribe


Keep informed of updates, bug fixes, software releases, news and more!
Installation or Upgrade Services for phpNuke or PostNuke? Require site maintenance, addons, modules or custom themes? Send private message or e-mail for rates and availablity.

Quick Links
  Domain Names
  Firewall Forums
  Joke Crazy
  Learning Linux
  Find your IP Fast!
  Purchase WinRAR

Trusted Nuke Sites
  NukeZone Hosting
  CMS Focus
  NukeFixes.com
  NukeResources.com
  NukeSkins.com
  NukeSites.com
  PHPNuke.org

Sponsor Links


NukeZone Hosting