Piwigo.org

vr · 2023-07-28 05:01:11

Hi

I have changed the password of a user of my gallery but the user cannot login after password change.

Also, forgot password emailing is not working. I have done the required settings files localfiles editor

<?php

/* The file does not exist until some information is entered
below. Once information is entered and saved, the file will be created. */

$conf['smtp_host'] = 'myserver:465';
$conf['smtp_user'] = 'myemailusername';
$conf['smtp_password'] = 'mypassword';
$conf['smtp_secure'] = 'tls';

?>

My environment:

Piwigo 13.8.0 Check for upgrade
Installed on 26 July 2023, 1 day ago
Operating system: Linux
PHP: 7.4.33 (Show info) [2023-07-28 02:59:57]
MySQL: 5.5.5-10.5.19-MariaDB-0+deb11u2 [2023-07-28 08:29:57]
Graphics Library: External ImageMagick 6.9.11-60
Cache size N/A   never calculated Refresh

Piwigo URL: http://e-daak.in/tasveer

Radjin · 2025-02-17 02:47:03

I to have this issue. I changed the password to make it more secure and it will not work. I am locked out. The password recovery is not sending an email.

I am not able to post a copy of the environment because I'm locked out.

Running the latest version of Piwigo
MySQL 8.0.40
PHP 8.3.14

Linty · 2025-02-17 11:26:19

Hello,

Piwigo version 15 brings a lot of changes in password management. You don't necessarily need an email anymore because we don't think it's always reliable. You have no access to the administration? or another admin? Because you can generate a link to reset the password

Radjin · 2025-02-17 12:55:36

Thanks for the reply. I have no access to the admin.

Linty · 2025-02-17 16:43:41

Or access to the database?

Radjin · 2025-02-17 16:58:53

I can access the DB through PHPMyAdmin. It’s Piwigo I have lost access to.

Is there another way to reset/change the password without access through Piwigo?

Last edited by Radjin (2025-02-18 10:31:21)

Linty · 2025-02-18 10:56:42

Yes, if you have access to the database (in your case via phpmyadmin), you can edit an user. I advise you to create a new account in your gallery. Then change the status of this user to "admin" via phpmyadmin. This new account will then allow you to connect to the dashboard to generate a new password for your main account.

Radjin · 2025-02-18 11:38:34

That’s a great idea, but as it is an internal gallery, not intended for public, I had disabled account creation. Is there a way to create an account through phpmyadmin?

I tried to find the user accounts in phpmyadmin but found nothing I thought I could change. Is there a way to update the password in phpmyadmin?

Last edited by Radjin (2025-02-20 05:00:08)

Radjin · 2025-02-21 16:45:13

Rummaging around more in PHPMyAdmin I found users and realized I had at one time had a second user. How do I elevate that user to admin in phpmyadmin?

erAck · 2025-02-22 13:06:36

Lookup the user ID for the username in table piwigo_users, then search that ID in table piwigo_user_infos column user_id, and then in column status change the value to admin (or webmaster if actually wanted). Also change the level column's value to 8, and for webmaster also adjust the expand and show_... columns' values.

Or rather simply try to reset the password for your original admin/webmaster user with [Forum, post 181215 by erAck in topic 31381] Lost password.

plg · 2025-02-22 14:33:03

If you have access to the database, you can change the password of any user :

Code:

update piwigo_users set password=md5('secretPassword') where id=123;

I know Piwigo does not use MD5 but it works. The password hash will be changed with the appropriate has algorithm on next log in.

Radjin · 2025-02-22 15:53:39

Thanks to all for the help. I was able to elevate the second user and then copy the password reset link. I did have an issue in that using a "-" in the password would evidently corrupt the password. I tested this twice and both times after using a "-" within the password I could no longer log in with old or new passwords. This is where my password became corrupted originally. I updated to a more secure password within Piwigo and it had a "-".

Piwigo 15.3.0 Check for upgrade
Installed on 24 November 2024, 2 months 3 weeks 6 days ago
Operating system: Darwin
PHP: 8.3.14 (Show info) [2025-02-22 14:51:34]
MySQL: 8.0.40 [2025-02-22 09:51:34]
Graphics Library: ImageMagick ImageMagick 7.1.0-23

erAck · 2025-02-23 08:44:04

Just tried, no problem changing password in the Customise ./profile.php form to one containing U+002D "-" HYPHEN-MINUS and logging in with that.

Piwigo.org

Announcement

#1 2023-07-28 05:01:11

Invalid password after change

#2 2025-02-17 02:47:03

Re: Invalid password after change

#3 2025-02-17 11:26:19

Re: Invalid password after change

#4 2025-02-17 12:55:36

Re: Invalid password after change

#5 2025-02-17 16:43:41

Re: Invalid password after change

#6 2025-02-17 16:58:53

Re: Invalid password after change

#7 2025-02-18 10:56:42

Re: Invalid password after change

#8 2025-02-18 11:38:34

Re: Invalid password after change

#9 2025-02-21 16:45:13

Re: Invalid password after change

#10 2025-02-22 13:06:36

Re: Invalid password after change

#11 2025-02-22 14:33:03

Re: Invalid password after change

Code:

#12 2025-02-22 15:53:39

Re: Invalid password after change

#13 2025-02-23 08:44:04

Re: Invalid password after change

Board footer