Bagaimana anda memulihkan atau reset sandi admin?
From Joomla! Documentation
Pemulihan Sandi Joomla! 1.5
Halaman ini hanya untuk Joomla! 2.5 dan versi berikutnya. Jika anda masih menggunakan Joomla! 1.5,
Biasanya, anda bisa menambah, mengedit dan menghapus pengguna dan sandi melalui Pengelolaan Pengguna di backend. Untuk melakukan ini, anda harus login sebagai grup Super Administrator.
Dalam beberapa situasi, mungkin ini tidak mungkin. Contoh, website anda mungkin "diretas" dan telah diganti sandi dan penggunanya. Atau mungkin orang yang mengetahui sandi tersebut sudah tidak ada. Atau mungkin anda lupa sandi yang sebelumnya digunakan.
Dalam kasus seperti ini, masih dimungkinkan bagi anda untuk mengubah database Joomla! agar bisa login sebagai Super Administrator. Berikut adalah cara yang mungkin bagi admin Joomla.
Metode 1: file configuration.php
Jika anda memiliki akses ke file configuration.php
dari pemasangan Joomla di server anda, maka anda dapat memulihkan sandi dengan cara berikut.
- Melalui program FTP yang terhubung ke website anda. Temukan file configuration.php dan lihat perizinan filenya. Jika izinnya adalah 444, atau nilai lain, maka gantilah perizinan file configuration.php menjadi 644. Ini akan mencegah masalah saat nanti mengupload file configuration.php selama proses ini.
- Download file konfigurasi.
- Buka file configuration.php yang sudah didownload dengan editor teks seperti notepad++ dan tambahkan baris ini
public $root_user='myname';
to the bottom of the list where myname is a username with Administrator access that you know the password for. A username that is in the Author User Group view access level or higher can also be used in place of a username with Administrator access.
4. Save the configuration.php file and upload it back to the site. You may leave the permissions on the configuration.php file at 644.
This user will now be a temporary Super User.
5. Login to the Backend and change the password of the user you don't have the password for or create a new Super User. If you create the new user you may want to block or delete the old user depending on your circumstances.
6. When finished, make sure to use the Click here to try to do it automatically link that appears in the alert box to remove the line that was added to the configuration.php file. If using the link was not successful, go back and delete the added line from your configuration.php file using a text editor. Upload the configuration.php file back to the site.
7. Using your FTP program, verify the file permissions of the configuration.php file. They should be 444. If you manually removed the added line, then change the file permissions on the configuration.php file to 444.
If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below.
Method 2: Direct Editing of Database
This information seems to be outdated regarding Joomla 5. Password stored into database is like this: '$2y$10$srycejllbYPXBxEVn4nVNeiZNoi7u/85DNRezB4H93ewGxHxXIcW.' for 'secret', which suggests it is encrypted nowadays. So all the procedures below won't work.
If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.
Change the Password in the Database
If the Super User is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.
These instructions show how to manually change a password to the word - "secret"
- Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
- Find and click on the table with _users appended in the list of tables. (Note: you may have a prefix that is not jos_. Simply go to the _users table for your prefix).
- Click on the Browse button in the top toolbar. This will show all of the users that are set up for this site.
- Find the user whose password you want to change and press the Edit icon for this row.
- A form will display that allows you to edit the password field. Copy the value
d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
into the password field and press the Go button. phpMyAdmin should display the message Affected rows: 1. At this point, the password should be changed to secret.
- Log in with this user and password and change the password of this user to a secure value. Check all of the users using the User Manager to make sure they are legitimate. If you have been hacked, you may want to change all of the passwords on the site.
Add a New Super User
If changing the password won't work, or you aren't sure which user is a member of the Super User group, you can use this method to create a new user.
- Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
- Press the SQL button in the toolbar to run an SQL query on the selected database. This will display a field called Run SQL query/queries on database <your database>.
- Delete any text in this field and copy and paste the following query below and press the Go button to execute the query and add the new Administrator to the table.
- Use the SQL query below to add another Administrator account.
The following code uses jos31_ as the table name prefix which is only an example table prefix. The prefix when you first installed Joomla is random or what you set it to specifically. You will need to change all occurrences of jos31_(your install set prefix) found in the code below to the prefix your installation is using.
SQL code for use with Joomla 2.5, 3.x, 4.x, 5.x
INSERT INTO `jos31_users`
(`name`, `username`, `password`, `params`, `registerDate`, `lastvisitDate`, `lastResetTime`)
VALUES ('Administrator2', 'admin2',
'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '', NOW(), NOW(), NOW());
INSERT INTO `jos31_user_usergroup_map` (`user_id`,`group_id`)
VALUES (LAST_INSERT_ID(),'8');
At this point, you should be able to log into the Backend of Joomla! with the username of admin2 and password of secret. After logging in, go to the User Manager and change the password to a new secure value and add a valid email address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super User group.
Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in.
The examples above change the password to secret. Two other possible values are shown below:
- password = "this is the MD5 and salted hashed password" ------------------------------------------------------ - admin = 433903e0a9d6a712e00251e44d29bf87:UJ0b9J5fufL3FKfCc0TLsYJBh2PFULvT - secret = d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199 - OU812 = 5e3128b27a2c1f8eb53689f511c4ca9e:J584KAEv9d8VKwRGhb8ve7GdKoG7isMm