REQUEST: Mass Password Reset
 

Is there a mass password reset hack for VB3?

We've recently had a major password leak (from out VB2 Board) and wish to force all users to change their password, without making it ask on next login (else anyone with the leasked passwords could just login using the old pass and change it, we want to email the passwords to the stored Email)

Anyone?

thanks

No warranties - use it at you own risk.

will that reset all passwords, and email the new password? if so how can i change the email text?

ty v much

-DF

Yes, it will reset the passwords and send them via eMail using the standard text for password-resets. (phrase resetpw).

ty, works perfectly :D

Hi :)

Is it posible to modify this to work with vb 2.3x

Thanks

sorry about that Dataforce ;0

Will this work with 3.6.1 beta?

I need to do a mass reset on my board as well...

i need a force change pass on next login hack.

I will pay $50.

why not use the "Password Expiry" under usergroups options?

aah yes

i set all to 1 and it forced everyone to change

thanks

Does this work for 3.7?

No, this doesn't work with 3.7. It needs a bit of code updating.

Can anyone update this to 3.7?

Updated for 3.7
No Guarantees
Use To start with userid 2

is there an update for vb3.8?

works for 3.8??

Does this work for v3.8?

I am used concept of the script listed here and create new which compatible with vBulletin 3.8.x. Now all you need is copy attached file to ./includes/cron/. After that add cron job to your vBulletin using file name pwdreset.php. Then launch this job and wait until it will be done.

DON’T FORGET TO DELETE OR DISABLE CREATED JOB!!!

I haven’t tested it on vBulletin 4.0.x but I think that this script will work.

Idk why it was update for 3.8 lol. This option is good enough. :erm:

ChopSuey,
In some situation you can have many reason not to use "Password Expire". Example: you have many groups, you need to send different letter, you haven't time to wait.

They set the password themselves. It shows a message that they have to change their pw's before going anywhere else. Its easy. :D

ChopSuey
Ok. :)
Also my variant of code can be used to send for example reanimation emailing.

Some security situations might warrant the admins issuing new passwords, instead of waiting for members to log into their account and change it (for example, hacked database where their old passwords might be dug up from somewhere).

If passwords were compromised, the hacker (or password stealer, etc) could simply log into the site, choose a new password that the valid member wouldn't know, and then have full access to their account and your forum.

I ran this and it appeared to work, but no emails were sent out. This is on 3.8.5 - any ideas why it's not working? Also is it possible, for testing, to manually specify a couple of userids?

Does this allow the ADMIN to choose the password used?? I want to be able to change the whole board to one password first, then change allow users back in slowly by changing their password manually and then letting them know...