Need To Disable Email Notification in DNN 6.2.9 after password reset? - DNN Creative Magazine for DotNetNuke - DotNetNuke Forum, DNN Creative Magazine, Video Tutorials, Skins, Module Reviews - Users Lounge

Need To Disable Email Notification in DNN 6.2.9 after password reset?

Last Post 09/15/2014 1:56 PM by Joseph Craig. 5 Replies.

Author

Messages

ReGFX

Nuke Pro
Posts:88

09/11/2014 4:06 PM
Well i tried posting this in another Dnn forum but I am not getting any replies... My question is how do you disable User Email Notification in DNN 6.2.9 after password reset? At times, I need to change the user password but do not need an email with both the user name and password to go out at the same time every-time password is changed. Even if I've unchecked the "Send Notification" check-box, the user still gets an email notification which we do not want. We prefer changing it for our users and contacting them directly with new password. We realize this may need to be done in the code somewhere. Possibly Desktop Modules>Admin>Security But that's all we know. Please advise...

Joseph Craig
DNN MVP
Posts:11667

09/11/2014 9:03 PM
That's an odd one. My experience is that the Notify box being checked or unchecked does exactly what you'd expect it to do. Of course, I don't always remember to uncheck the box. There's also a similar box in the security role assignment area. You could always edit SMTP settings to stop mail from being sent, and then fix it when you are ready to send mail. An enable/disable checkbox on SMTP Settings would be useful, too, come to think of it. And ... welcome back!

Joe Craig, Patapsco Research Group Complete DNN Support

ReGFX

Nuke Pro
Posts:88

09/12/2014 10:44 AM
Thank you for the welcome... Yes that is the work-a-round i've used where i disable the DNN Mail and update the Password then contact the client. Although Odd request, here is why we do it at some locations where Email Security is at a premium. For some locations, it is an I.T. Security violation to send any email that includes both user admin's name and password in the same email.. So if a clients Email gets Hacked... the hacker does a search for anything .com or web related and bingo, has "The Keys To The Kingdom" to the DNN CMS. We have seen this tactic done. Therefore this is why we would prefer just disabling the email notification from inside the user notification. Without having to go to the SMTP mail and removing mail server connection from DNN and then change the password and then re-enable mail server connection with DNN That is the case I am trying to resolve. I have read that this can be done via the code somewhere in DNN but it was a long time ago and unable to locate where i can interrupt the auto sending after a password change via DNN code of both user name and password via email. Basically sending Username and Password via email, if it is changed from the Host or Admin is a major Email I.T. Security Violation and we're trying to address it in this version of DNN. Still trying to locate where exactly in the DNN code to over ride "Send Notification" with out having to disconnect DNN from the mail server.

Joseph Craig
DNN MVP
Posts:11667

09/12/2014 11:42 AM
If the real issue is with sending email with passwords ... upgrade to "modern" DNN and use the new "reset password" functionality. For new accounts, the notification feature is in the authentication provider (I think). Not sure where it is for the change password functionality, but I'd look in the admin folder or in the User Accounts module. Oh ... I also believe that configuring web.config to prevent password retrieval will keep the passwords from being sent, but not the emails. I'd suggest testing that.

Joe Craig, Patapsco Research Group Complete DNN Support

ReGFX

Nuke Pro
Posts:88

09/15/2014 11:12 AM
Thank You for the reply, I will look into your recommendations. Quick question though... The web.config approach sounds like an interesting possibility. I am somewhat familiar with DNN web.config but not exactly an advanced expert on it... I know enough to be productive. Any thoughts where in the DNN web.config I could possibly give this a try without bringing down the web site?

Joseph Craig
DNN MVP
Posts:11667

09/15/2014 1:56 PM
It is in the Providers section, and there is a big block of comments that define all of the options. It looks like this: <providers> <clear /> <!-- Configuration for AspNetSqlMembershipProvider: connectionStringName="string" Name corresponding to the entry in <connectionStrings> section where the connection string for the provider is specified maxInvalidPasswordAttempts="int" The number of failed password attempts, or failed password answer attempts that are allowed before locking out a user?s account passwordAttemptWindow="int" The time window, in minutes, during which failed password attempts and failed password answer attempts are tracked enablePasswordRetrieval="[true\|false]" Should the provider support password retrievals enablePasswordReset="[true\|false]" Should the provider support password resets requiresQuestionAndAnswer="[true\|false]" Should the provider require Q & A minRequiredPasswordLength="int" The minimum password length minRequiredNonalphanumericCharacters="int" The minimum number of non-alphanumeric characters applicationName="string" Optional string to identity the application: defaults to Application Metabase path requiresUniqueEmail="[true\|false]" Should the provider require a unique email to be specified passwordFormat="[Clear\|Hashed\|Encrypted]" Storage format for the password: Hashed (SHA1), Clear or Encrypted (Triple-DES) description="string" Description of what the provider does --> <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SiteSqlServer" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" requiresUniqueEmail="false" passwordFormat="Encrypted" applicationName="DotNetNuke" description="Stores and retrieves membership data from the local Microsoft SQL Server database" /> </providers> It probably would be better to do any experimentation on a local or test copy of the site.

Joe Craig, Patapsco Research Group Complete DNN Support

Forums > Users Lounge > Everything Else