Home/ Questions/Q 4256300
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-21T05:20:07+00:00

I want to implement a forgot-password feature in asp.net mvc that allows users to

  • 0

I want to implement a forgot-password feature in asp.net mvc that allows users to reset their password, and have some questions in this regard:

  1. Lets say that before allowing users to reset their password, I want to verify some extra information such as their first and last name. This info is not stored by default in the table created by aspnet_regsql. What is the recommended approach to address such issues? Should I store this kind of info in a separate table, and use table joins to verify OR should i modify the schema of the table generated by aspnet_regsql (how?) so that I don’t have to use joins? Do I need to write a custom provider OR would that not be necessary?

  2. I have read at places e.g. in this post that instead of emailing a temporary password, an alternative is to email a URL that when clicked allows users to change their password. How is this done? How to ensure that the URL expires after 1 hour?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I don’t know if this is the recommended approach but you could create a separate table like you mentioned and then implement your own membership provider. That way on a password reset you can implement the additional functionality required.

    For the second part:
    I would generate a token, read about a variety of ways to generate it here. You can store the token with a date/time, email a link to the user with the token as part of the URL, then you’d be able to check it against the amount of elapsed time, once the users clicks on it.

    • 0