When users of my site forgot their passwords to login to their accounts, I would like to send the user an email with url through which one can reset his/her password. I know a couple of e-commerce websites have this feature. Do not know how they did it.
The URL has the following requirement:
1. It can uniquely identify an user account. i.e. it So that, the user does not need to provide any extra information.
2. The url can be used only once, i.e., after password is reset through this url, the url becomes void.
3. The url must contain encrypted elements so that it can not be guessed or constructed maliciously.
This website is using ASP.NET with .NET Framework 1.1. Can anyone give me a head start or point to me a reference? Thax.
...
Go to the complete details ...