Hi there,
I am using sqlmembership provider for my VisualBasic web application security.
I don't want to use the default reset password control and behavior.
What I am trying to do is, after the user provides a correct answer to the security question, send him an email with a link similar to this:
http://localhost:1558/SetPassword.aspx?ID=c2f0ddcf-5821-439a-a046-f581a4a4919a
Where ID is the user ID in aspnetdb database
When the user visits the link I offer him two text boxes for the new password and its verification. Submit button validates both textboxes have the same text and if so, generates a random salt, concatenate the new password with the salt and hash the concatenated string.
I replace in the membership table the salt and password values for the user id received in the query string.
I must be doing something wr ...
Go to the complete details ...