1. Forum
  2. Fidonet Message
  3. SYNCHRONET

  • Password recovery sbbs web site

    From Plt@1:103/705 to All on Friday, February 15, 2019 18:41:08
    Is there script file that I can use to allow the users to email their password to them if they forget it?

    Thanks

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Dmxrob@1:103/705 to Plt on Friday, February 15, 2019 18:59:17
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?

    Passwords + Email = :-(

    If they forget it, probably be best to go through a challenge routine to reset it. I thought I saw a mod for that back in the day -- maybe it was a WWIV mod.

    Rob

    dmxrob þ BBSing from St. Louis, Missouri since 1988

    ---
    þ Synchronet þ Gateway to the West - St. Louis, Missouri - bbs.dmxrob.net
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Plt on Friday, February 15, 2019 21:42:54
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?



    yes
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Plt on Friday, February 15, 2019 23:12:37
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?

    It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

    digital man

    This Is Spinal Tap quote #10:
    Dozens of people spontaneously combust each year... just not widely reported. Norco, CA WX: 48.1øF, 95.0% humidity, 12 mph E wind, 0.09 inches rain/24hrs
    --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Plt@1:103/705 to Dmxrob on Saturday, February 16, 2019 01:07:50
    On 2/15/19 6:59 PM, Dmxrob wrote:
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?

    Passwords + Email = :-(

    If they forget it, probably be best to go through a challenge routine to reset >it. I thought I saw a mod for that back in the day -- maybe it was a WWIV mod.

    Rob


    Ty

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Plt@1:103/705 to MRO on Saturday, February 16, 2019 01:09:13
    On 2/15/19 9:42 PM, MRO wrote:
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?



    yes
    ---

    Which one please?

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to MRO on Saturday, February 16, 2019 11:31:52
    Re: Password recovery sbbs web site
    By: MRO to Plt on Fri Feb 15 2019 08:42 pm

    Is there script file that I can use to allow the users to email their
    password to them if they forget it?

    yes

    Wow, that's probably one of the most helpful replies I've ever seen.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Digital Man on Saturday, February 16, 2019 13:31:04
    Re: Password recovery sbbs web site
    By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm


    It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.


    it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Plt on Saturday, February 16, 2019 13:31:33
    Re: Re: Password recovery sbbs web site
    By: Plt to MRO on Sat Feb 16 2019 12:09 am

    Is there script file that I can use to allow the users to email their password to them if they forget it?
    Which one please?



    it's in the default code
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to MRO on Saturday, February 16, 2019 16:25:07
    Re: Re: Password recovery sbbs web site
    By: Plt to MRO on Sat Feb 16 2019 12:09 am

    Is there script file that I can use to allow the users to email their password to them if they forget it?
    Which one please?



    it's in the default code

    pretty sure he is asking about a script for the web interface and not the telnet interface

    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Nightfox on Saturday, February 16, 2019 15:47:04
    Re: Password recovery sbbs web site
    By: Nightfox to MRO on Sat Feb 16 2019 10:31 am

    Re: Password recovery sbbs web site
    By: MRO to Plt on Fri Feb 15 2019 08:42 pm

    Is there script file that I can use to allow the users to email their
    password to them if they forget it?

    yes

    Wow, that's probably one of the most helpful replies I've ever seen.


    are you an idiot too? it's in the default synchronet release which this guy is running.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Mortifis on Saturday, February 16, 2019 15:47:26
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 03:25 pm

    it's in the default code

    pretty sure he is asking about a script for the web interface and not the telnet interface


    why do you think that.
    his web isnt even up
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to MRO on Saturday, February 16, 2019 18:49:01
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 03:25 pm

    it's in the default code

    pretty sure he is asking about a script for the web interface and not the telnet interface


    why do you think that.
    his web isnt even up

    I suppose I may have just inferred that based on the Subject "Message Subject:
    Password recovery sbbs web site" :/
    ^^^^^^^^^^^^^


    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to MRO on Saturday, February 16, 2019 15:42:54
    Re: Password recovery sbbs web site
    By: MRO to Digital Man on Sat Feb 16 2019 12:31 pm

    Re: Password recovery sbbs web site
    By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm


    It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.


    it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.

    That's exactly what it does.

    digital man

    This Is Spinal Tap quote #11:
    Nigel Tufnel: No. no. That's it, you've seen enough of that one.
    Norco, CA WX: 57.3øF, 46.0% humidity, 8 mph NNW wind, 0.12 inches rain/24hrs --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to MRO on Saturday, February 16, 2019 15:44:02
    Re: Password recovery sbbs web site
    By: Digital Man to MRO on Sat Feb 16 2019 02:42 pm

    Re: Password recovery sbbs web site
    By: MRO to Digital Man on Sat Feb 16 2019 12:31 pm

    Re: Password recovery sbbs web site
    By: Digital Man to Plt on Fri Feb 15 2019 10:12 pm


    It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.


    it would be nice to have it just email the pw if you try to login to the user but dont know the email. i use a lot of email aliases and cant remember then all with the various bbses.

    That's exactly what it does.

    Oh, I see, you don't want it to confirm the email first. That's a simple change.

    digital man

    This Is Spinal Tap quote #16:
    David St. Hubbins: I believe virtually everything I read...
    Norco, CA WX: 57.3øF, 46.0% humidity, 8 mph NNW wind, 0.12 inches rain/24hrs --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Mortifis on Saturday, February 16, 2019 18:17:41
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 05:49 pm

    why do you think that.
    his web isnt even up

    I suppose I may have just inferred that based on the Subject "Message Subject:
    Password recovery sbbs web site" :/
    ^^^^^^^^^^^^^


    oh, you actually read the msg subjects? we never change those things.

    his website isnt up, though.


    phil: i dont think we have a password recovery script for the web yet.
    probably better for them to do it via telnet.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Digital Man on Saturday, February 16, 2019 18:20:27
    Re: Password recovery sbbs web site
    By: Digital Man to MRO on Sat Feb 16 2019 02:44 pm


    Oh, I see, you don't want it to confirm the email first. That's a simple change.

    digital man


    yeah that's better. i'm not sure if you want it to echo the actual email address in case someone sneeky is trying to collect it.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to MRO on Saturday, February 16, 2019 20:32:47
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 05:49 pm

    why do you think that.
    his web isnt even up

    I suppose I may have just inferred that based on the Subject "Message Subject:
    Password recovery sbbs web site" :/
    ^^^^^^^^^^^^^


    oh, you actually read the msg subjects? we never change those things.

    I do :-P

    He may have taken it down because he is very security minded and bots constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)


    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to MRO on Saturday, February 16, 2019 20:50:58
    Re: Password recovery sbbs web site
    By: Digital Man to MRO on Sat Feb 16 2019 02:44 pm


    Oh, I see, you don't want it to confirm the email first. That's a simple change.

    digital man


    yeah that's better. i'm not sure if you want it to echo the actual email address in case someone sneeky is trying to collect it.

    I suppose one could modify the exec/login.js and remove

    {
    console.print("\1n\1c\1hPlease confirm your Internet e-mail address: \1y");
    var email_addr = console.getstr(LEN_NETMAIL);
    if(email_addr.toLowerCase() == u.netmail.toLowerCase()) {

    and adjust the corresponding closing tags. or put in an extra
    console.print( "\1n\1c\1hDo you wish to use your default email address?: \1y"); blah blahs before confirm email address ...



    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Dmxrob@1:103/705 to Mortifis on Saturday, February 16, 2019 20:09:21
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

    constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

    You gave me an idea... let's automate that! Stay tuned :-)

    Rob

    dmxrob þ BBSing from St. Louis, Missouri since 1988

    ---
    þ Synchronet þ Gateway to the West - St. Louis, Missouri - bbs.dmxrob.net
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Mortifis on Saturday, February 16, 2019 20:09:36
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

    oh, you actually read the msg subjects? we never change those things.

    I do :-P

    He may have taken it down because he is very security minded and bots constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)


    You dont know phil very well, do ya.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Plt@1:103/705 to MRO on Saturday, February 16, 2019 23:22:38
    Re: Re: Password recovery sbbs web site
    By: MRO to Mortifis on Sat Feb 16 2019 14:47:26

    why do you think that.
    his web isnt even up

    If your refering to my system my web services running on port 85.

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to Dmxrob on Sunday, February 17, 2019 02:12:21
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

    constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

    You gave me an idea... let's automate that! Stay tuned :-)

    I already did, like years ago :-P
    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Plt@1:103/705 to Digital Man on Sunday, February 17, 2019 20:13:05
    Re: Password recovery sbbs web site
    By: Plt to All on Fri Feb 15 2019 05:41 pm

    Is there script file that I can use to allow the users to email their password to them if they forget it?

    It's built into the default login module (exec/login.js), just set 'email_passwords = true' in the [login] section of your ctrl/modopts.ini file. That's actually the default setting, so you should already have it.

    digital man


    I checked both files and I saw the settings but I am still trying to figure out how the password reset for the web?

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Plt@1:103/705 to Nightfox on Sunday, February 17, 2019 20:17:45
    Re: Password recovery sbbs web site
    By: MRO to Plt on Fri Feb 15 2019 08:42 pm

    Is there script file that I can use to allow the users to email their
    password to them if they forget it?

    yes

    Wow, that's probably one of the most helpful replies I've ever seen.

    Nightfox


    Yes explained its possible but it did not explain how to do it.

    ---
    þ Synchronet þ sbbs.dynu.net 2025
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Plt on Sunday, February 17, 2019 23:37:34
    Re: Re: Password recovery sbbs web site
    By: Plt to Digital Man on Sun Feb 17 2019 07:13 pm

    I checked both files and I saw the settings but I am still trying to figure out how the password reset for the web?

    I see. I don't think there's been one developed for "the web" yet.

    digital man

    Synchronet "Real Fact" #40:
    Synchronet has been ported to FreeBSD, NetBSD, OpenBSD, Solaris, QNX, and MacOS.
    Norco, CA WX: 45.4øF, 77.0% humidity, 8 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to Dmxrob on Monday, February 18, 2019 04:20:21
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Sat Feb 16 2019 07:32 pm

    constantly hammer the web server with login attempts but doesn't count failed logins or put them temp ban. Though, grabbing the daily full_blacklist_database.zip file from http://myip.ms and merging it into ip.can helps because the web server does read that :-)

    You gave me an idea... let's automate that! Stay tuned :-)


    Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping any SBBS or SysOP added entries. I can pass it along if you'd like.

    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to MRO on Monday, February 18, 2019 17:01:08
    Re: Password recovery sbbs web site
    By: MRO to Nightfox on Sat Feb 16 2019 02:47 pm

    Is there script file that I can use to allow the users to email
    their password to them if they forget it?

    yes

    Wow, that's probably one of the most helpful replies I've ever seen.

    are you an idiot too? it's in the default synchronet release which this guy is running.

    Rather than just a 'yes', you could also tell him which script file it is since he obviously doesn't know. (Are YOU an idiot?)

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Mortifis on Monday, February 18, 2019 21:44:42
    Re: Re: Password recovery sbbs web site
    By: Mortifis to Dmxrob on Mon Feb 18 2019 03:20 am

    Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping

    if you grab this list you can block all the tor nodes too.

    http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mortifis@1:103/705 to MRO on Tuesday, February 19, 2019 02:00:50
    Re: Re: Password recovery sbbs web site
    By: Mortifis to Dmxrob on Mon Feb 18 2019 03:20 am

    Do you run php on your server? I have a script I wrote a while ago that runs as a timed event to download and merge the myip.ms blacklist_database.txt into the ip.can ... it strips out the old blacklist_database.txt and replaces it with an updated version while keeping

    if you grab this list you can block all the tor nodes too.

    http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv

    very good, thank you, added that to my ip.can and it immediately started blocking ip's not already listed from other merged lits.
    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!

    ---
    þ Synchronet þ AlleyCat! BBS - http://alleycat.synchro.net:81
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Mortifis on Wednesday, February 20, 2019 22:48:12
    Re: Re: Password recovery sbbs web site
    By: Mortifis to MRO on Tue Feb 19 2019 01:00 am

    http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv

    very good, thank you, added that to my ip.can and it immediately started blocking ip's not already listed from other merged lits.
    2 wrongs don't make a right, but 3 left turns will get you back on the freeway!



    if you grab that every day [you should] you need to rig it so it's sorted and dupes are removed.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From mark lewis@1:3634/12.73 to Mortifis on Thursday, February 21, 2019 11:57:44

    On 2019 Feb 20 21:48:12, MRO wrote to you:
    http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv

    very good, thank you, added that to my ip.can and it immediately
    started blocking ip's not already listed from other merged lits. 2
    wrongs don't make a right, but 3 left turns will get you back on the
    freeway!

    if you grab that every day [you should] you need to rig it so it's
    sorted and dupes are removed.

    wget -O tor-ips.txt http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv

    sort -V tor-ips.txt | uniq > tor-ips-sorted.txt

    cat ip.can.hdr my-blocked-ips.txt tor-ips-sorted.txt > ip.can


    it says it is a csv file but it isn't... it is only a text file listing of ip numbers, one per line... the above should work fairly well... only problem is keeping the lists of ips separated so they can automatically be put together as
    needed...

    i don't know, though, if that list is only TOR exit nodes or if it also includes TOR routers... TOR routers are ok since they do not send any TOR traffic out into the non-TOR world and they do offer other services... i had several TOR router nodes that were being blocked at one time but my NTP stuff was trying to use them for time updates via pool.ntp.org... i had to come up with a method to split the TOR exit nodes list from the TOR routers nodes and then we were GoodToGo<tm> :)

    )\/(ark

    Always Mount a Scratch Monkey
    Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
    ... Dr Jekyll isn't himself today.
    ---
    * Origin: (1:3634/12.73)