Cantr II Discussion Forum

Hi, I can't change my Cantr Password. It says that my old pass is incorrect. But I log in with this pass. (I noticed it, because my Cantr Spy is broken. Can anyone say me,how I can change my pass in the Cantr Spy?

CantrSpy is not working at the moment.

http://forum.cantr.org/viewtopic.php?f=1&t=17225&start=75

You will have to do what you normally would do upon forgetting your password. Once you presumably recieve a new password, you can change the one that CantrSpy uses by "logging out" with CantrSpy, entering the password, then logging in again with "remember password" checked. However, as SumBum pointed out, CantrSpy doesn't have much use at the moment and will behave unpredictably due to the incompatibility.

Aha, there are side effects to the security. I will try and get these all fixed soon.

(Passwords are now stored more securely, but now I need to fix cantrspy and password changing)
Hope you don't mind a little wait, I'll fix it as soon as I can

Cheers
- Natso

Natso, mind adding in a password reminder mechanism while you're at it? Seems a pretty basic function that Cantr doesn't have.

Hashed systems can't send you your password, they can only create a new password and email it to you. And in a system like that, it shouldn't rewrite the old password because if someone else went to click the "send me a new password" link, then the original user couldn't log in and if they'd entered a false email address (or more like changed into using one, or their registration email had expired), they couldn't see the message with the new password. So alternative passwords should be in a separate table and set to expire after a while. Someone tries to log in and if it doesn't match the regular password, it would check the secondary table for a temporary password, and the person should be required to change their password once they log in (the temporary password could be written in the old password field).

I've just done password changing, and, as I don't have access to the special file, Natso won't be able to fix Cantr spy soon. Sorry for inconveniences.