What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Messenger Plus! for Live Messenger » WLM Plus! Help » can't access my msgplus account

can't access my msgplus account
Author: Message:
BaTigolo
New Member
*

Avatar
JusT LoVe Me MoRe ;)

Posts: 3
34 / Male / Flag
Joined: Feb 2011
O.P. can't access my msgplus account
i registered with the email : [ hossam.elbatigol@hotmail.com ]
then i changed the email to : [ batigolo0o@hotmail.com ]
then the site redirected me to the page : [ http://www.msgplus.net/SpecialPages/logon.aspx?returnurl=/Support.aspx ]
then i tried to log in but there was amessage : [ Your login attempt was not successful. Please try again. ]
and i tried to log in with the old email but the same message
why ?

This post was edited on 02-24-2011 at 09:40 AM by Tochjo.
02-12-2011 12:20 AM
Profile PM Web Find Quote Report
BaTigolo
New Member
*

Avatar
JusT LoVe Me MoRe ;)

Posts: 3
34 / Male / Flag
Joined: Feb 2011
O.P. RE: can't access my msgplus account
solution please.....
02-24-2011 03:17 AM
Profile PM Web Find Quote Report
Sunshine
Elite Member
*****

Avatar

Posts: 5142
Reputation: 122
– / Female / Flag
Joined: Mar 2004
Status: Away
RE: can't access my msgplus account
You wrote a comma instead of a dot in batigolo0o@hotmail.com, that's why it did not recognise your email adress. I've changed the comma to a dot now and generated a new password just in case you forgot your pw too. You can change the pw into anything you want (I can not see what it is or was set too). You should receive an email about the password. If not, get back to me here.

This post was edited on 02-24-2011 at 09:28 AM by Sunshine.
[Image: 25dr3o9]
02-24-2011 09:26 AM
Profile E-Mail PM Web Find Quote Report
CookieRevised
Elite Member
*****

Avatar

Posts: 15519
Reputation: 173
– / Male / Flag
Joined: Jul 2003
Status: Away
RE: can't access my msgplus account
quote:
Originally posted by Sunshine
You wrote a comma instead of a dot in batigolo0o@hotmail.com, that's why it did not recognise your email adress.
Isn't that a bug in the system then?
Because AFAIK commas are not allowed in email addresses, or at least not in the place where it was.
Maybe a better/stricter email validator would prevent such booboos :p
.-= A 'frrrrrrrituurrr' for Wacky =-.
02-24-2011 05:29 PM
Profile PM Find Quote Report
BaTigolo
New Member
*

Avatar
JusT LoVe Me MoRe ;)

Posts: 3
34 / Male / Flag
Joined: Feb 2011
O.P. RE: RE: can't access my msgplus account
quote:
Originally posted by Sunshine
You wrote a comma instead of a dot in batigolo0o@hotmail.com, that's why it did not recognise your email adress. I've changed the comma to a dot now and generated a new password just in case you forgot your pw too. You can change the pw into anything you want (I can not see what it is or was set too). You should receive an email about the password. If not, get back to me here.



really thanks sooooooooo much:)
02-25-2011 04:15 AM
Profile PM Web Find Quote Report
V@no
Full Member
***

Avatar
sexy

Posts: 162
Joined: Mar 2004
RE: RE: can't access my msgplus account
quote:
Originally posted by CookieRevised
quote:
Originally posted by Sunshine
You wrote a comma instead of a dot in batigolo0o@hotmail.com, that's why it did not recognise your email adress.
Isn't that a bug in the system then?
Because AFAIK commas are not allowed in email addresses, or at least not in the place where it was.
Maybe a better/stricter email validator would prevent such booboos :p
indeed. And if you guys are planning update the account-related script, please consider change the way "forgot password" code works:
after user submitted their email address, send a link (with some unique hash/id, which could be a MD5 hash from old email + new email, granted it would require an aditional field in the users database). The user then will require visit that address where they can change their password.
This method will help if: a) email address is no longer valid and later user remember their password. b) somebody else submitting your email, therefore messing up your current password.

The same could be applied to email change routine. It would prevent from accidents as in this topic.
02-25-2011 05:59 AM
Profile PM Find Quote Report
CookieRevised
Elite Member
*****

Avatar

Posts: 15519
Reputation: 173
– / Male / Flag
Joined: Jul 2003
Status: Away
RE: can't access my msgplus account
quote:
Originally posted by V@no
after user submitted their email address, send a link (with some unique hash/id, which could be a MD5 hash from old email + new email, granted it would require an aditional field in the users database). The user then will require visit that address where they can change their password.
(y)... although it shouldn't be a hash of the old and new email address because that can easily be guessed, calculated and abused too. It should be like in any other 'forgot pwd' system: just a random GUID, impossble to guess, and which expires after a very short time. Otherwise it will not solve your point B either.

And as for your point A: that can't be solved like that in a secure way. The user must always have access to the email address he provided when he signed up, otherwise he is out of luck. The ability to enter an alternative email address to send the link to, without any further validation, is a very massive 'no-no' and an open door for hacking. Stuff like this is usually solved by setting an alternative email address in your user profile _after_ you have successfully signed in (thus with the correct password); it is never asked, and should never be asked when you click a "forget pwd" link. The user should be able to select the option to send the link to his lternative email though, provided he set one up before.

Either way, yes, that "forget pwd" system should indeed be revised too.

This post was edited on 02-25-2011 at 08:18 PM by CookieRevised.
.-= A 'frrrrrrrituurrr' for Wacky =-.
02-25-2011 08:16 PM
Profile PM Find Quote Report
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On