Is there script file that I can use to allow the users to email their password to them if they forget it?

Thanks

---
þ Synchronet þ sbbs.dynu.net 2025

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

Passwords + Email = :-(

If they forget it, probably be best to go through a challenge routine to reset it. I thought I saw a mod for that back in the day -- maybe it was a WWIV mod.

Rob

dmxrob þ BBSing from St. Louis, Missouri since 1988

---
þ Synchronet þ Gateway to the West - St. Louis, Missouri - bbs.dmxrob.net

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

yes
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

digital man

This Is Spinal Tap quote #10:
Dozens of people spontaneously combust each year... just not widely reported. Norco, CA WX: 48.1øF, 95.0% humidity, 12 mph E wind, 0.09 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 2/15/19 6:59 PM, Dmxrob wrote:

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

Passwords + Email = :-(

If they forget it, probably be best to go through a challenge routine to reset >it. I thought I saw a mod for that back in the day -- maybe it was a WWIV mod.

Rob

Ty

---
þ Synchronet þ sbbs.dynu.net 2025

On 2/15/19 9:42 PM, MRO wrote:

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

yes
---

Which one please?

---
þ Synchronet þ sbbs.dynu.net 2025

Re: Password recovery sbbs web site
By: MRO to Plt on Fri Feb 15 2019 08:42 pm

Is there script file that I can use to allow the users to email their
password to them if they forget it?

yes

Wow, that's probably one of the most helpful replies I've ever seen.

Nightfox

---
þ Synchronet þ Digital Distortion: digitaldistortionbbs.com

Re: Password recovery sbbs web site
By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm

It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Plt to MRO on Sat Feb 16 2019 12:09 am

Is there script file that I can use to allow the users to email their password to them if they forget it?

Which one please?

it's in the default code
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Plt to MRO on Sat Feb 16 2019 12:09 am

Is there script file that I can use to allow the users to email their password to them if they forget it?

Which one please?

it's in the default code

pretty sure he is asking about a script for the web interface and not the telnet interface

2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Password recovery sbbs web site
By: Nightfox to MRO on Sat Feb 16 2019 10:31 am

Re: Password recovery sbbs web site
By: MRO to Plt on Fri Feb 15 2019 08:42 pm

Is there script file that I can use to allow the users to email their
password to them if they forget it?

yes

Wow, that's probably one of the most helpful replies I've ever seen.

are you an idiot too? it's in the default synchronet release which this guy is running.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 03:25 pm

it's in the default code

pretty sure he is asking about a script for the web interface and not the telnet interface

why do you think that.
his web isnt even up
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 03:25 pm

it's in the default code

pretty sure he is asking about a script for the web interface and not the telnet interface

why do you think that.
his web isnt even up

I suppose I may have just inferred that based on the Subject "Message Subject:
Password recovery sbbs web site" :/
^^^^^^^^^^^^^


2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Password recovery sbbs web site
By: MRO to Digital Man on Sat Feb 16 2019 12:31 pm

Re: Password recovery sbbs web site
By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm

It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.

That's exactly what it does.

digital man

This Is Spinal Tap quote #11:
Nigel Tufnel: No. no. That's it, you've seen enough of that one.
Norco, CA WX: 57.3øF, 46.0% humidity, 8 mph NNW wind, 0.12 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Password recovery sbbs web site
By: Digital Man to MRO on Sat Feb 16 2019 02:42 pm

Re: Password recovery sbbs web site
By: MRO to Digital Man on Sat Feb 16 2019 12:31 pm

Re: Password recovery sbbs web site
By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm

It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.

That's exactly what it does.

Oh, I see, you don't want it to confirm the email first. That's a simple change.

digital man

This Is Spinal Tap quote #16:
David St. Hubbins: I believe virtually everything I read...
Norco, CA WX: 57.3øF, 46.0% humidity, 8 mph NNW wind, 0.12 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 05:49 pm

why do you think that.
his web isnt even up

I suppose I may have just inferred that based on the Subject "Message Subject:
Password recovery sbbs web site" :/
^^^^^^^^^^^^^

oh, you actually read the msg subjects? we never change those things.

his website isnt up, though.


phil: i dont think we have a password recovery script for the web yet.
probably better for them to do it via telnet.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Password recovery sbbs web site
By: Digital Man to MRO on Sat Feb 16 2019 02:44 pm

Oh, I see, you don't want it to confirm the email first. That's a simple change.

digital man

yeah that's better. i'm not sure if you want it to echo the actual email address in case someone sneeky is trying to collect it.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 05:49 pm

why do you think that.
his web isnt even up

I suppose I may have just inferred that based on the Subject "Message Subject:
Password recovery sbbs web site" :/
^^^^^^^^^^^^^

oh, you actually read the msg subjects? we never change those things.

I do :-P

He may have taken it down because he is very security minded and bots constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)


2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Password recovery sbbs web site
By: Digital Man to MRO on Sat Feb 16 2019 02:44 pm

Oh, I see, you don't want it to confirm the email first. That's a simple change.

digital man

yeah that's better. i'm not sure if you want it to echo the actual email address in case someone sneeky is trying to collect it.

I suppose one could modify the exec/login.js and remove

{
console.print("\1n\1c\1hPlease confirm your Internet e-mail address: \1y");
var email_addr = console.getstr(LEN_NETMAIL);
if(email_addr.toLowerCase() == u.netmail.toLowerCase()) {

and adjust the corresponding closing tags. or put in an extra
console.print( "\1n\1c\1hDo you wish to use your default email address?: \1y"); blah blahs before confirm email address ...



2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

You gave me an idea... let's automate that! Stay tuned :-)

Rob

dmxrob þ BBSing from St. Louis, Missouri since 1988

---
þ Synchronet þ Gateway to the West - St. Louis, Missouri - bbs.dmxrob.net

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

oh, you actually read the msg subjects? we never change those things.

I do :-P

He may have taken it down because he is very security minded and bots constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

You dont know phil very well, do ya.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: MRO to Mortifis on Sat Feb 16 2019 14:47:26

why do you think that.
his web isnt even up

If your refering to my system my web services running on port 85.

---
þ Synchronet þ sbbs.dynu.net 2025

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

You gave me an idea... let's automate that! Stay tuned :-)

I already did, like years ago :-P
2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Password recovery sbbs web site
By: Plt to All on Fri Feb 15 2019 05:41 pm

Is there script file that I can use to allow the users to email their password to them if they forget it?

It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

digital man

I checked both files and I saw the settings but I am still trying to figure out how the password reset for the web?

---
þ Synchronet þ sbbs.dynu.net 2025

Re: Password recovery sbbs web site
By: MRO to Plt on Fri Feb 15 2019 08:42 pm

Is there script file that I can use to allow the users to email their
password to them if they forget it?

yes

Wow, that's probably one of the most helpful replies I've ever seen.

Nightfox

Yes explained its possible but it did not explain how to do it.

---
þ Synchronet þ sbbs.dynu.net 2025

Re: Password recovery sbbs web site
By: MRO to Plt on Fri Feb 15 2019 08:42 pm

Is there script file that I can use to allow the users to email their
password to them if they forget it?

yes

Wow, that's probably one of the most helpful replies I've ever seen.

Nightfox

If you follow the thread you will see that most people did not notice that you are asking about a script to email password upon failed web interface login events. The answer is, basically, no. (though to be more accurate, this is if you are using the stock web/root ... seems it is hard coded). If you put some notice on your site and suggest that the user telnet(ssh/rlogin) and when they are prompted "Did you forget your password" answer yes. I am not sure if the webv4 has another way of dealing with the issue or not.

---
þ Synchronet þ Realm of Dispair - rodbbs.synchro.net:83

Re: Re: Password recovery sbbs web site
By: Plt to Digital Man on Sun Feb 17 2019 07:13 pm

I checked both files and I saw the settings but I am still trying to figure out how the password reset for the web?

I see. I don't think there's been one developed for "the web" yet.

digital man

Synchronet "Real Fact" #40:
Synchronet has been ported to FreeBSD, NetBSD, OpenBSD, Solaris, QNX, and MacOS.
Norco, CA WX: 45.4øF, 77.0% humidity, 8 mph ESE wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: Password recovery sbbs web site
By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

You gave me an idea... let's automate that! Stay tuned :-)

Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping any SBBS or SysOP added entries. I can pass it along if you'd like.

2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81

Re: Password recovery sbbs web site
By: MRO to Nightfox on Sat Feb 16 2019 02:47 pm

Is there script file that I can use to allow the users to email
their password to them if they forget it?

yes

Wow, that's probably one of the most helpful replies I've ever seen.

are you an idiot too? it's in the default synchronet release which this guy is running.

Rather than just a 'yes', you could also tell him which script file it is since he obviously doesn't know. (Are YOU an idiot?)

Nightfox

---
þ Synchronet þ Digital Distortion: digitaldistortionbbs.com

Re: Re: Password recovery sbbs web site
By: Mortifis to Dmxrob on Mon Feb 18 2019 03:20 am

Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping

if you grab this list you can block all the tor nodes too.

http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: Re: Password recovery sbbs web site
By: Mortifis to Dmxrob on Mon Feb 18 2019 03:20 am

Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping

if you grab this list you can block all the tor nodes too.

http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv

very good, thank you, added that to my ip.can and it immediately started blocking ip's not already listed from other merged lits.
2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

---
þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81