Finding Self-Hosted Username/Password?

This site is best viewed in a modern browser with JavaScript enabled.

Finding Self-Hosted Username/Password?

LBHadmin

I inherited the management of a website that has gone through multiple hands over the years. One issue I am having is with logging into the self-hosted form builder. We currently have one form and it will not send an email when complete, which was not an issue previously to migration. Everything else with the form works normally besides this.

I am able to access to login page at https://www.domain.com/machform but I do not have the username or password, and have no way to ask previous managers of the site. Is there a way I can reset or find this out? I have access to CPanel and myPHP through our hosted GoDaddy account.

LBHadmin

UPDATE: I was able to find the ap_user section in myPHPadmin, where I see multiple accounts and encrypted passwords. Unfortunatley, when I change these passwords, Matchform still does not let me log into the self hosted portal. I even added myself as a new row in the ap_user table without any success. Passwords are re-encrypted using the MD5 feature built into myPHPadmin. What am I doing wrong? It seems like this would work when I see other support posts in the past.

imanuk

I found myself in the same situation here's what I did:

Requested the password reset but received no email so:

I found the script in reset_password.php
In there I found the way the reset password link is constructed:
https://websiteaddress.co.uk/machform/reset.php?q=
(you will need to use your web address/directory)
After the = you will need to construct the following then convert to base 64:
user_id=<user_id showin in the myphp database ##_users table>&reset_hash=<reset_hash created by requesting email reset link and copied from myphpadmin>
example:
user_id=1&reset_hash=9645706c97cf4f691ce28571dd5f2610
Copy that to here: https://www.base64encode.org/
it will give you a string: dXNlcl9pZD0xJnJlc2V0X2hhc2g9OTY0NTcwNmM5N2NmNGY2OTFjZTI4NTcxZGQ1ZjI2MTA
add this after your q= example:
https://websiteaddress.co.uk/machform/reset.php?q=dXNlcl9pZD0xJnJlc2V0X2hhc2g9OTY0NTcwNmM5N2NmNGY2OTFjZTI4NTcxZGQ1ZjI2MTA
paste that into your browser and its just like you clicked on the reset link from an email and you can change your password... Hurrah! Hope that helps.