i have read through the book and made the site running, but i could not find any way how to decrypt the password to send to the users who forgot their password.

there is a method EncryptPassword(ByVal password As String) As Byte() to encrypt the password and save into the database, however there is no DecryptPassword method when query the password from the database.

i would be very grateful if anyone knows how to decrypt the password.

many thanks

long

The password isn't really encrypted - it's hashed. Hashing is like a one-way encryption. The idea was to be very secure so even site administrators could not see user's passwords.

You can only change their password and send them the new one.

many thanks for your reply that gives me a good idea. also is there any way to query the password from the database and convert it to string?

many thanks

Long

long

Assuming you read the password into a byte array named byteArray:

Convert to a string:

  string str = System.BitConverter.ToString(byteArray);

If you want a printable string with no wierd chars you can base64-encode it:

  string str = Convert.ToBase64String(byteArray);