By el777 on

Strange problem. I cannot login with correct password. I'vew even looked at the database, and compared the password in table with
SELECT md5('password'); They are identical, but login is impossible. WHy?
I tried to get password by mail, but it was not sent!

Thanx for help!

⋅ Categories: Drupal 4.6.x

Comments

pembeci’s picture

pembeci commented

Strange indeed. Did you make sure that your browser's character encoding is set to UTF-8 before you typed your password? This is the only thing that comes to my mind. Is the password mailing (or other drupal initiated mails) works in general but not for that specific password? You can also try changing the password after logging as the super user and see if it will solve the problem.

el777’s picture

el777 commented

Thank you for your answer!

The encoding was ok. I use passwords with latin letters only.
The problem orrurs with admin password, so I cannot log in and change it. Fortunately, I have access to mysql, so I can log and update password by sql command like:
UPDATE users SET password=md5('password') WHERE uid=1;
Before I found that md5 sum of password was changed, so it was a new password!

The root of this prolem is here.
Everybody can change your password if he clicks on the button "forget password"!
After looking on the forum I found an issue discribing the situation, the proposed solution is not to change the password but send a request to e-mail, with special key. But my situation showed it's not impelemented yet. :(

kkobashi’s picture

kkobashi commented

Its an annoying thing.

Drupal should have had the user upon new registration, enter in something unique about him/herself. Then, prompt with that before issuing a new password request.

Kerry Kobashi
Kobashi Computing

el777’s picture

el777 commented

I found an issue with such problem - Request New Password Security.
However it was discussed last spring, it doesn't work now with Drupal 4.6.4
:-(