Need help setting up new user with Admin privliges

[ms1]

Hello

I need someone to go into our server and and set up a new user with admin privliges. An ex employee messed with our sugar opensource and now everyone is locked out because he changed everyones passwords. I will be happy to pay someone for their time to do this.

Thank you

[Angelini]

I would offer to pay the x employee - it would be worth it in the long run...I bet some good time and $$ is being lost with this problem.

[ms1]

he was charged with stealing from the company so i don't think your idea is such a good one, but thanks for the suggestion

[qfh]

I think it should be very simple to do. Just go to sugar_directory/modules/Users/User.php and find function called encrypt_password($user_password). Create a blank php file and paste that function in there. Then write:

echo encrypt_password("your_new_password");

Then upload this file to your server and run the php file. You'll get your new password. Go to your database, you can use phpMyAdmin utility, and paste this password into an admin account in users table.

Then login with your new password into Sugar and change everyone's passwords manually. You can also reset the same password for everyone by running mysql command:

update users set user_password = "your_encrypted_password_string" where user_password != "" and user_password is not null

If you want to spend a little more time, generate a php file above with a loop of random files.

Good luck!

[kpit]

he was charged with stealing from the company so i don't think your idea is such a good one, but thanks for the suggestion

You might also want to press charges against him for computer hacking for changing passwords. there are several other laws that could be set against him for computer crimes. once convicted of a computer crime makes it very hard for them to ever be employeed again in that capacity.

[Markku]

Resetting only password is not enough, you need proper user hash as well. One way is to copy password and hash from the user who's password and hash is known (maybe from admin account from your test environment).

There are also other things that you might have to check, misbehaving administrator can mess with lots of things without having direct access to database.