Comments on: Changing the autogenerated password format in the SqlMembershipProvider http://www.sidesofmarch.com/index.php/archive/2006/10/16/changing-the-autogenerated-password-format-in-the-sqlmembershipprovider/ Thoughts on life, liberty, and information technology Tue, 24 Jan 2012 10:43:34 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: bg http://www.sidesofmarch.com/index.php/archive/2006/10/16/changing-the-autogenerated-password-format-in-the-sqlmembershipprovider/#comment-490879 bg Tue, 09 Jun 2009 11:57:57 +0000 http://www.sidesofmarch.com/index.php/archive/2006/10/16/changing-the-autogenerated-password-format-in-the-sqlmembershipprovider/#comment-490879 We actually have a real problem with the password format, which is that if they include angular brackets they arer sometimes not transported correctly in HTML encoded emails and if copy-pasted into a textbox they are rejected by the server as potential code injection. I am not sure yet if I want to go all the way of creating a new provider or if I just wrap it in a GeneratePassword class of my own which filters out the angular brackets... We actually have a real problem with the password format, which is that if they include angular brackets they arer sometimes not transported correctly in HTML encoded emails and if copy-pasted into a textbox they are rejected by the server as potential code injection.

I am not sure yet if I want to go all the way of creating a new provider or if I just wrap it in a GeneratePassword class of my own which filters out the angular brackets…

]]> By: Don Wilcox http://www.sidesofmarch.com/index.php/archive/2006/10/16/changing-the-autogenerated-password-format-in-the-sqlmembershipprovider/#comment-235394 Don Wilcox Fri, 27 Jun 2008 02:21:30 +0000 http://www.sidesofmarch.com/index.php/archive/2006/10/16/changing-the-autogenerated-password-format-in-the-sqlmembershipprovider/#comment-235394 I had a similar problem to yours. So I used your idea of replacing the membership provider to fix the reset password. Then to solve the problem in the CreateUserWizard, I just turned off AutoGeneratePassword, added an invisible TextBox named Password to the control, and in the CreatingUser event, I stuff the password control with a password generated using hte same algorithm: TextBox pswdTxt = (TextBox)CreateUserWizard1.CreateUserStep.ContentTemplateContainer.FindControl("Password"); pswdTxt.Text = MyGeneratePassword(); Thanks for the tip, I could only find my half of it. Don I had a similar problem to yours. So I used your idea of replacing the membership provider to fix the reset password. Then to solve the problem in the CreateUserWizard, I just turned off AutoGeneratePassword, added an invisible TextBox named Password to the control, and in the CreatingUser event, I stuff the password control with a password generated using hte same algorithm:

TextBox pswdTxt =
(TextBox)CreateUserWizard1.CreateUserStep.ContentTemplateContainer.FindControl(“Password”);
pswdTxt.Text = MyGeneratePassword();

Thanks for the tip, I could only find my half of it.

Don

]]>