Portal Engine Questions on portal engine and web parts.
Version 7.x > Portal Engine > Registration & Logon web parts View modes: 
User avatar
Member
Member
positivepurchasing - 10/23/2013 9:08:55 AM
   
Registration & Logon web parts
Hi,

In the RegistrationForm web part the email address is used as the username. Logging in using the LogonForm web part how is the user supposed to know that their username is their email address, especially if they change their email address?

This seems to make no sense or have I missed something?

Cheers
Paul.

User avatar
Kentico Legend
Kentico Legend
Brenden Kehren - 10/23/2013 9:58:27 AM
   
RE:Registration & Logon web parts
What I do is create an alternative form for registration and add the fields you want to it. This way the user can enter their own username, email, etc and not automatically be assigned one. If they change their email address, its not a problem. Their username is still their old email address while their email address is updated to their new one. I have a few logins like this on the Kentico site and it works, but not ideal.

User avatar
Member
Member
positivepurchasing - 10/23/2013 10:03:36 AM
   
RE:Registration & Logon web parts
Hi FroggEye.

Thanks, that's what I shall do.

Cheers
Paul.

User avatar
Member
Member
positivepurchasing - 10/24/2013 9:52:54 AM
   
RE:Registration & Logon web parts
Hi FroggEye.


Just struggling as usual.

http://devnet.kentico.com/docs/7_0rc/devguide/index.html?password_format.htm.

I was trying to find out Kentico's password hash procedure, so I can test the result against the value in the db as normal. But I can't find enough info. I don't know whether the password is just prepended to the salt and then hashed or is the password and salt hashed separately and then concatenated or some other way.

Perhaps I should set Kentico not to use a salt, making the procedure simpler, hopefully.

http://devnet.kentico.com/docs/7_0rc/devguide/index.html?password_management.htm


Cheers
Paul

User avatar
Member
Member
positivepurchasing - 10/24/2013 10:27:25 AM
   
RE:Registration & Logon web parts
Hi.

What about a different approach. I add a UserName field to the registration form, and use that as the username.

Does that make sense?

Cheers
Paul.

User avatar
Member
Member
positivepurchasing - 10/24/2013 10:45:11 AM
   
RE:Registration & Logon web parts
OK, seems to work fine.

User avatar
Certified Developer 13
Certified Developer 13
kentico_josefd - 11/5/2013 8:25:35 AM
   
RE:Registration & Logon web parts
Hi,

Good to hear you made it work.

You mentioned you would like to know more about how are the passwords salted. You can find the exact formula in the Kentico Security Guide (p12).

Regards,
Josef

User avatar
Member
Member
positivepurchasing - 11/5/2013 8:29:37 AM
   
RE:Registration & Logon web parts
Hi Josef.


Thanks mate, Kentico Security Guide added to my bookmarks.


Cheers
Paul.