Makes sense. I am guessing the "forgot password" feature you speak of relates 
to a CMS of some kind rather than the database itself?

On Nov 21, 2009, at 04:19, Mugarura Cavin wrote:

> Paul,
> 
> let me try to state the problem i had.
> 
> i developed a database in mysql, and handed it to the client. 
> The client sent me a request for changes, and left town (i could not reach 
> him by email)
> 
> i had previously created a user with admin privileges, lets say username: 
> admin password admin: email address: (clients email address)
> i tried to login, and either the password had been changed or i had forgotten 
> it. The easiest way to recover it, was to use forgot my email address.
> but this would send it to the clients email address not mine. I did not want 
> to wait for the client, to return to base.
> 
> I however had admin privileges via remote access, for all databases on the 
> server (root). Mysql encryption does not allow me to change the password 
> field (well u can change it, but it has no effect), so i had access to the 
> specific database and the table users which had the encrypted password. 
> 
> the simple solution would be to change the email address, since most DBAs 
> dont encrypt this field. However if the field is encrypted, then the other 
> option is to select the table users, type any password and change function to 
> md5. 
> 
> this is a noble attempt to explain the dilema which kept me behind schedule 
> for two weeks.     
> 
> regards
> 
> Cavin
> 
> 
> Message: 2
> Date: Fri, 20 Nov 2009 16:16:55 +0300
> From: Paul Bagyenda <[email protected]>
> Subject: Re: [LUG] re: mysql hack
> To: Linux Users Group Uganda <[email protected]>
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> Lets try again: Please explain clearly what the MySQL problem was and how you 
> solved it. Got a little confusing half-way through your original email.
> 
> 
> _______________________________________________
> LUG mailing list
> [email protected]
> http://kym.net/mailman/listinfo/lug
> %LUG is generously hosted by INFOCOM http://www.infocom.co.ug/
> 
> The above comments and data are owned by whoever posted them (including 
> attachments if any). The List's Host is not responsible for them in any way.
> ---------------------------------------
> 

_______________________________________________
LUG mailing list
[email protected]
http://kym.net/mailman/listinfo/lug
%LUG is generously hosted by INFOCOM http://www.infocom.co.ug/

The above comments and data are owned by whoever posted them (including 
attachments if any). The List's Host is not responsible for them in any way.
---------------------------------------

Reply via email to