asp.net会员更改密码而不知道旧密码

Question

评估方法签名时,需要在更改密码时知道旧密码.

membershipUser.ChangePassword(userWrapper.OldPassword, userWrapper.Password)

有没有办法在不知道旧密码的情况下更改密码.

Answer 1

 string username = "username";
 string password = "newpassword";
 MembershipUser mu = Membership.GetUser(username);
 mu.ChangePassword(mu.ResetPassword(), password);

Answer 2

这里的其他答案是正确的,但可以将密码保留为未知状态.

ChangePassword如果密码不符合Web.Config中规定的要求(最小长度等),将抛出异常.但它只有在ResetPassword被调用后才会失败,因此原始用户或尝试更改密码的人不会知道密码.在更改密码之前检查复杂性要求以避免这种情况:

var user = Membership.GetUser(userName, false);

if ((newPassword.Length >= Membership.MinRequiredPasswordLength) &&
    (newPassword.ToCharArray().Count(c => !Char.IsLetterOrDigit(c)) >=
         Membership.MinRequiredNonAlphanumericCharacters) &&
    ((Membership.PasswordStrengthRegularExpression.Length == 0) ||
         Regex.IsMatch(newPassword, Membership.PasswordStrengthRegularExpression))) {

    user.ChangePassword(user.ResetPassword(), newPassword);
} else {
    // Tell user new password isn't strong enough
}

Answer 3

您需要在更改前重置用户密码,并将生成的密码传递给ChangePassword.

string randompassword = membershipUser.ResetPassword();
membershipUser.ChangePassword(randompassword , userWrapper.Password)

或内联:

membershipUser.ChangePassword(membershipUser.ResetPassword(), userWrapper.Password)