Actions

Difference between revisions of "How do you recover or reset your admin password?"

From Joomla! Documentation

(Add a New Super Administrator User: removed value from usertype field in 1.6 sql also removed activaton and params fields and values as they are not needed for reset)
m (update)
(26 intermediate revisions by 11 users not shown)
Line 1: Line 1:
 +
{{version|2.5,3.1}}
 +
{{tip|This page is only for Joomla! 2.5 and higher versions. If you are still using Joomla! 1.5 instructions can be [[J1.5:How_do_you_recover_or_reset_your_admin_password%3F|found here]].|title=Joomla! 1.5 Password Recovery}}
 +
 
Normally, you can add, edit and delete users and passwords from the back-end User Manager. To do this, you must be logged in as a member of the Super Administrator group.  
 
Normally, you can add, edit and delete users and passwords from the back-end User Manager. To do this, you must be logged in as a member of the Super Administrator group.  
  
 
In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.
 
In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.
  
In these cases, it is still possible to fix up the Joomla! database so you can log back in as a Super Administrator. There are three possible methods discussed below.
+
In these cases, it is still possible to alter the Joomla! database so you can log back in as a Super Administrator. These are the possible methods available to Joomla! administrators.
  
===Use the Lost Password Feature===
+
== Method 1: Configuration.php file ==
If you have access to the email address that was used for the admin user, and you have made the "lost password" feature available on the front end, the simplest thing is to do is to use the "lost password" Front-end function. The site will send an e-mail to the user's e-mail address and allow you to change the password.
+
If you have access to your configuration.php file for the Joomla installation on your server, can recover the password using the following method.
  
If this method will not work, you have two other options, both of which require working with the MySQL database directly.
+
1.) Using an FTP program connect to your site. Find the configuration.php file and look at the file permissions. If the permissions are 444 or some other value, then change the permissions of the configuration.php file to 644. This will help prevent issues when uploading the changed configuration.php file later in this process.
 +
 
 +
2.) Download the configuration file.
 +
 
 +
3.) Open the configuration.php file that was downloaded in a text editor such as notepad++ and add this line
 +
 +
public $root_user='myname';
 +
 
 +
to the bottom of the list where myname is a username with administrator access that you know the password for. An username that is Author level or higher can also be used in place of a username with administrator access.
 +
 
 +
4.) Save the configuration.php file and upload it back to the site. You may leave the permissions on the configuration.php file at 644.
 +
 
 +
This user will now be a temporary super administrator.
 +
 
 +
5.) Login to the back end and change the password of the administrator user you don't have the password for or create a new super admin user.
 +
If you create the new user you may want to block or delete the old user depending on your circumstances.
 +
 
 +
6.) When finished, make sure to use the "Click here to try to do it automatically" link that appears in the alert box to remove the line that was added to the configuration.php file. If using the link was not successful, then go back and delete the added line from your configuration.php file using a text editor. Upload the configuration.php file back to the site.
 +
 
 +
7.) Using your FTP program verify the file permissions of the configuration.php file, they should be 444. If you manually removed the added line, then change the file permissions on the configuration.php file to 444.
 +
 
 +
If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below in this document.
 +
 
 +
== Method 2: Direct Editing of Database ==
 +
If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.
  
 
===Change the Password in the Database===
 
===Change the Password in the Database===
If the admin user is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin.
+
If the admin user is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.
  
 
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.  
 
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.  
# Click on the table "jos_users" in the list of tables.  
+
# Click on the table "jos_users" in the list of tables (note: you may have a prefix that is not jos_, simply go to the _users table for your prefix).  
 
# Click on the "Browse" button in the top toolbar. This will show all of the users that are set up for this site.
 
# Click on the "Browse" button in the top toolbar. This will show all of the users that are set up for this site.
 
# Find the user whose password you want to change and press the Edit icon for this row.
 
# Find the user whose password you want to change and press the Edit icon for this row.
Line 24: Line 51:
  
 
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.  
 
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.  
# Press the "SQL" button in the toolbar to run a SQL query on the selected database. This will display a field called "Run SQL query/queries on database <your database>".
+
# Press the "SQL" button in the toolbar to run an SQL query on the selected database. This will display a field called "Run SQL query/queries on database <your database>".
# Delete any text in this field and paste in the following and press the ''Go'' button.
+
# Delete any text in this field and copy and paste one of the following queries and press the ''Go'' button to execute the query and add the new Administrator user to the table.
 +
# Use the 1.6 query version for a site based upon Joomla 1.6.xx and use the 1.5 query version for a site based upon Joomla 1.5.xx.
  
  
Line 31: Line 59:
  
  
'''SQL code for use with Joomla 1.6.xx'''
+
'''SQL code for use with Joomla 2.5.x {{JVer|2.5}} 3.1.x {{JVer|3.1}} '''
  
 
<source lang="sql">INSERT INTO `jos_users`
 
<source lang="sql">INSERT INTO `jos_users`
   (`id`, `name`, `username`, `email`, `password`, `usertype`, `block`, `sendEmail`,
+
   (`name`, `username`, `password`, `params`)
    `registerDate`, `lastvisitDate`)
+
VALUES ('Administrator2', 'admin2',
    VALUES ('40', 'Administrator2', 'admin2', 'your-email@yourdomain.com',
+
     'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '');
     'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199',
+
INSERT INTO `jos_user_usergroup_map` (`user_id`,`group_id`)
    '', 0, 1, '0000-00-00 00:00:00', '0000-00-00 00:00:00');
+
VALUES (LAST_INSERT_ID(),'8');
INSERT INTO `jos_user_usergroup_map` (`user_id`,`group_id`) VALUES (40, 8);
+
 
</source>
 
</source>
  
 +
At this point, you should be able to log into the back end of Joomla! with the username of "admin2" and password of "secret". After logging in, go to the User Manager and change the password to a new secure value and add a valid e-mail address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super Administrator group.
  
'''SQL code for use with Joomla 1.5.xx'''
+
{{warning|Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in. Be sure you change the password to a secure value after logging in.}}
 
+
<source lang="sql">INSERT INTO `jos_users`
+
  (`id`, `name`, `username`, `email`, `password`, `usertype`, `block`, `sendEmail`,
+
    `gid`, `registerDate`, `lastvisitDate`)
+
    VALUES (40, 'Administrator2', 'admin2', 'your-email@yourdomain.com',
+
    'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199',
+
    'Super Administrator', 0, 1, 25, '0000-00-00 00:00:00', '0000-00-00 00:00:00');
+
INSERT INTO `jos_core_acl_aro` VALUES (NULL, 'users', 40, 0, 'Administrator2', 0);
+
INSERT INTO `jos_core_acl_groups_aro_map` VALUES (25, '', LAST_INSERT_ID());
+
</source>
+
 
+
At this point, you should be able to log into the back end of Joomla! with the username of "admin2" and password of "secret". After logging in, go to the User Manager and change the password to a secure value and the e-mail to a valid e-mail address. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super Administrator group. The admin2 id that is inserted has an id of 40.
+
  
 
The examples above change the password to "secret". Two other possible values are shown below:
 
The examples above change the password to "secret". Two other possible values are shown below:
Line 66: Line 82:
 
</pre>
 
</pre>
  
<font color="#ff0000">Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in. Be sure you change the password to a secure value after logging in. </font>
+
 
[[Category:FAQ]][[Category:Administration FAQ]][[Category:Getting Started FAQ]][[Category:Version 1.5 FAQ]]
+
<noinclude>[[Category:FAQ]][[Category:Administration FAQ]][[Category:Getting Started FAQ]] [[Category:User Management]]</noinclude>
[[Category:User Management]]
+

Revision as of 14:18, 18 October 2013

Tip-icon.png
Joomla! 1.5 Password Recovery

This page is only for Joomla! 2.5 and higher versions. If you are still using Joomla! 1.5 instructions can be found here.

Normally, you can add, edit and delete users and passwords from the back-end User Manager. To do this, you must be logged in as a member of the Super Administrator group.

In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.

In these cases, it is still possible to alter the Joomla! database so you can log back in as a Super Administrator. These are the possible methods available to Joomla! administrators.

Contents

Method 1: Configuration.php file

If you have access to your configuration.php file for the Joomla installation on your server, can recover the password using the following method.

1.) Using an FTP program connect to your site. Find the configuration.php file and look at the file permissions. If the permissions are 444 or some other value, then change the permissions of the configuration.php file to 644. This will help prevent issues when uploading the changed configuration.php file later in this process.

2.) Download the configuration file.

3.) Open the configuration.php file that was downloaded in a text editor such as notepad++ and add this line

public $root_user='myname';

to the bottom of the list where myname is a username with administrator access that you know the password for. An username that is Author level or higher can also be used in place of a username with administrator access.

4.) Save the configuration.php file and upload it back to the site. You may leave the permissions on the configuration.php file at 644.

This user will now be a temporary super administrator.

5.) Login to the back end and change the password of the administrator user you don't have the password for or create a new super admin user. If you create the new user you may want to block or delete the old user depending on your circumstances.

6.) When finished, make sure to use the "Click here to try to do it automatically" link that appears in the alert box to remove the line that was added to the configuration.php file. If using the link was not successful, then go back and delete the added line from your configuration.php file using a text editor. Upload the configuration.php file back to the site.

7.) Using your FTP program verify the file permissions of the configuration.php file, they should be 444. If you manually removed the added line, then change the file permissions on the configuration.php file to 444.

If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below in this document.

Method 2: Direct Editing of Database

If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.

Change the Password in the Database

If the admin user is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.

  1. Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
  2. Click on the table "jos_users" in the list of tables (note: you may have a prefix that is not jos_, simply go to the _users table for your prefix).
  3. Click on the "Browse" button in the top toolbar. This will show all of the users that are set up for this site.
  4. Find the user whose password you want to change and press the Edit icon for this row.
  5. A form will display that allows you to edit the password field. Copy the value
    d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
    
    into the password field and press the Go button. phpMyAdmin should display the message "Affected rows: 1". At this point, the password should be changed to "secret".
  6. Log in with this user and password and change the password of this user to a secure value. Check all of the users using the User Manager to make sure they are legitimate. If you have been hacked, you may want to change all of the passwords on the site.

Add a New Super Administrator User

If changing the password won't work, or you aren't sure which user is a member of the Super Administrator group, you can use this method to create a new user.

  1. Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
  2. Press the "SQL" button in the toolbar to run an SQL query on the selected database. This will display a field called "Run SQL query/queries on database <your database>".
  3. Delete any text in this field and copy and paste one of the following queries and press the Go button to execute the query and add the new Administrator user to the table.
  4. Use the 1.6 query version for a site based upon Joomla 1.6.xx and use the 1.5 query version for a site based upon Joomla 1.5.xx.


NOTE: The following code uses jos_ as the table name prefix which is the Joomla default table prefix If you elected to change this prefix when you first installed Joomla, you will need to change jos_ to the prefix you used.


SQL code for use with Joomla 2.5.x Joomla 2.5 3.1.x Joomla 3.1

INSERT INTO `jos_users`
   (`name`, `username`, `password`, `params`)
VALUES ('Administrator2', 'admin2',
    'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '');
INSERT INTO `jos_user_usergroup_map` (`user_id`,`group_id`)
VALUES (LAST_INSERT_ID(),'8');

At this point, you should be able to log into the back end of Joomla! with the username of "admin2" and password of "secret". After logging in, go to the User Manager and change the password to a new secure value and add a valid e-mail address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super Administrator group.

Stop hand nuvola.svg.png
Warning!

Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in. Be sure you change the password to a secure value after logging in.


The examples above change the password to "secret". Two other possible values are shown below:

- password = "this is the MD5 and salted hashed password"
------------------------------------------------------
- admin  = 433903e0a9d6a712e00251e44d29bf87:UJ0b9J5fufL3FKfCc0TLsYJBh2PFULvT
- secret = d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
- OU812  = 5e3128b27a2c1f8eb53689f511c4ca9e:J584KAEv9d8VKwRGhb8ve7GdKoG7isMm