HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Password Reset Script

XeoncrossXeoncross New
edited January 2013 in General Banter

Simply copy the following code into a file in the web root and you can change user passwords without needing to go through email resets. Handy for admins with many incompetent users, or for quick resets of development accounts on installs without SMTP setup.


$ php password_reset.php Bob newpassword

This script is only accessible from the command line, so don't worry about users accessing it through your server. If you want to be extra safe, move it out of the web root and change the PATH_ROOT variable to the correct location of the vanilla root.



Sign In or Register to comment.