I am trying to set up an admin page that will be useful for confirming identity of a person who has lost their username and whose email is out of date.
I have set up the signup process so that new users can provide additional information such as address , phone etc that will help identify them, but assuming that some users will not enter such data when they create their account, all I have to work with is their username and (no longer valid) email.
If they "think" their username might be "johndoe", and if there is a johndoe in the database, I would like to be able to confirm that they are indeed johndoe before resetting their email for them so that they can get themselves a new password. To this end I would like to ask them their security password question and have them verify their security password answer
The problem: I see no way to view PasswordAnswer from the database, as it appears hashed or encrypted. Is there a wa ...
Go to the complete details ...