<div class="post-text" itemprop="text">
I'm trying to update the sqlMembershipProvider to provide a more secure and simpler recovery option. The SQL memebership provider has to be used as we have a database with 1000's of users.
I trap when failedPasswordAttemps > 3 and then generate a guid (which I store with the username for 24 hours) (this has been tested and works) An email is sent to the user with a link to the site and the guid as a parameter. (this has been tested and works)
I then look up the username and id from the link (this has been tested and works) I then use the lookup to try to use aspnet_Membership_SetPassword to reset the password. I use the folowing function to generate hashed and salted password
Public Shared Function CreateSalt() As String
Dim rng As New RNGCryptoServiceProvider()
Dim buff As Byte() = New Byte(31) {}
rng.GetBytes(buff)
Retur ...
Go to the complete details ...