Hi,

Some years ago I developed a solution whereby a bespoke site I created passed new user credentials into a mojoportal site, to which I added some code to programmatically create a new user.  This worked fine, but the site was set to use plain passwords.

My client now wants password hashing to be turned on on the mojo site.  I was hoping that the code I'd written would still work, and that mojo would create the new user, generate a salt and hash the password for me now that the password mode has been changed.  It does do something to the password as it is scrambled, but it doesn't generate a salt value and I cannot log in.  When I change the password manually to the same one I tried to set it to programmatically, I can see that a salt is created and the password hash is completely different to the one that my code created.  I can, of course, log in fine once the password has been set manually.

Here's the relevant bit of my code (the user's name, email and plain text password have been sent in via a querystring):-

            SiteUser existingUser = new SiteUser(siteSettings, UserEmail);
            if (existingUser.UserId == -1)
            {
                SiteUser newUser = new SiteUser(siteSettings);
                newUser.Name = UserFirstName + " " + UserLastName;
                newUser.LoginName = UserEmail;
                newUser.Email = UserEmail;
                newUser.Password = UserPassword;
                newUser.Save();

             }

Should this work with password hashing switched on?  I was hoping that the SiteUser Save method would take care of the password hashing for me!

Is there another way to achieve this?  It will be a retrograde step to have to ask users to recover / reset their password in the mojo site.

Thanks in advance,

Mike