protected void fp_onclick(object sender, EventArgs e)
{
string Email = fpEmail.Text;
string Pswd = CreatePassword(8);
string lastUpdOn = DateTime.Now.ToString("MM/dd/yyyy h:mm tt");
//string lastUpdBy = Session["userID"].ToString();
//string lastUpdOn = DateTime.Now.ToString("MM/dd/yyyy h:mm tt");
User userObj = new User();
User userObj1 = new User();
UserManagement uDao = new UserManagement();
userObj1 = uDao.checkEmail(Email);
int EmailMatch = 0;
if (userObj1 != null)
{
EmailMatch = 1;
}
if (EmailMatch == 1) // if email matches
{
userObj = uDao.getUserByEmail(Email); // get email from sql
// Password codes below
// make a new byte array
byte[] salt;
// generate salt
new RNGCryptoServiceProvider().GetBytes(salt = new byte[16]);
// hash and salt using PBKDF2
var pbkdf2 = new Rfc2898DeriveBytes(Pswd, salt, 10000);
// place string in byte array
byte[] hash = pbkdf2.GetBytes(20);
// make new byte array to store hashed password + salt
// 36 --> 16(salt) + 20(hash)
byte[] hashbytes = new byte[36];
Array.Copy(salt, 0, hashbytes, 0, 16);
Array.Copy(hash, 0, hashbytes, 16, 20);
string PasswordHash = Convert.ToBase64String(hashbytes);
string PasswordSalt = Convert.ToBase64String(salt);
// Database codes insert below
Boolean insCnt = uDao.updateUserPassword(Email, PasswordHash, PasswordSalt, lastUpdOn);
// Email codes below
string body = "Dear User, " + Environment.NewLine + Environment.NewLine + "Your Password Is Successfully Reset! " + Environment.NewLine + "This Is Your Current Login Password: "******". Please Proceed To Change Your Password Upon Your Login. Thank you. " + Environment.NewLine + Environment.NewLine + Environment.NewLine + "Regards, " + Environment.NewLine + "Targeted Marketing Admin Team";
string subject = "Password Successfully Reset!";
string toEmail = Email;
sendMail(subject, body, toEmail);
string script = "alert('Password successfully reset! Please check your new password at your email!');";
ClientScript.RegisterClientScriptBlock(this.GetType(), "Alert", script, true);
}
else
{
string script = "alert('Email not registered. Please re-enter a correct email.');";
ClientScript.RegisterClientScriptBlock(this.GetType(), "Alert", script, true);
}
}