|
I have created a sample application called ‘Southwind’ using the Southwind database that ships with
Microsoft SQL Server. I am using Iron Speed Designer V3.2.4 Enterprise Edition, although you can use
Iron Speed Designer Professional Edition as well. You can download my Lost Password Sample Application
which includes the modified database to use as a guide. Unzip the contents into a folder and attach the
Microsoft SQL Server database that is included. Don’t forget to have a look at the Readme.doc file, located
in the root of the Southwind application folder. More experienced users may decide to use their own application
and database and just “follow along” with this tutorial.
The Employee table in the Southwind database did not contain any login information, so I added my own.
I added three fields:
Because this application did not have any security associated with it, I added a fourth field called
‘SecurityRoleId’ and a SecurityRole table to match.
I use a separate login field because some clients don’t want to use an email address for a login but
would rather use a shorter login id that takes less time to enter ( not everyone is a fast typist!).
Of course you could still enter an email address into the login field if you wanted.
I first turned to the Iron Speed Designer sample application ‘Support1’ for clues when I started writing
a Lost Password function. You may notice a remarkable resemblance in the Support application that Iron
Speed has provided for us on their web site. The Iron Speed support application also uses a ‘Lost Password’
mechanism. You can download the Support1 application from the Iron Speed website.
If you are working with your own application, you will need to make sure that you have successfully run
the Role-based Security Wizard first. If you have not yet done this please do it now. See below an example
of what I did for Role-Based Security.
And...
Now, open a Windows folder that points toward the Southwind application that you downloaded and extracted
from my web site. We want to examine a subfolder called ‘Security’.
** Note that Iron Speed Designer V3.2 and later creates a new folder called ‘Security’ that contains all
of the sign-in information. This folder will create created for new applications and for upgraded applications.
In previous versions the sign-in and sign-out files are stored in the ‘Shared’ folder (for each application).
Note the Lost Password files that I added previously.
Now open Iron Speed Designer and load the Southwind application that you downloaded from my web site.
Navigate to the Security folder and select the SignIn page.
Now, add a standard data-bound button from the Iron Speed Designer tool box on the left.
With our button added, select the button. If you don’t have the HTML QuickView turned on, Select View, HTML
Quick View from the Iron Speed Designer menu. You should see the following:
You may need to scroll over to the right using the horizontal scroll bar. Change the name of the button from
the ubiquitous but useless name of ‘Button’ to ‘LostPassword’.
Double-click the button again.
We want to add some text to the button along with a tooltip.
Go to the Bindings tab.
Select LostPassword.aspx from the list, or select your own if you are just following along with your
own application.
Click Open. Then Click the Save button to save changes to this page. It wouldn’t hurt to compile our application
to make sure we haven’t added any coding errors into our
example. So let’s do that and continue.
With our button added and configured, let’s examine the heart of the matter, our Lost Password layout page.
Select this page from the Application Explorer.
And you will see...
Note that I added an ASPX textbox and a standard button. In order to reference the value contained in
this unbound textbox, we need to tell Iron Speed Designer about it in code. Go to the Code tab and note
this line of code:
If you are following along in this article and building your own, remember to add this line or your code
will not compile. For the ‘Email my password’ button, I used a standard Code Customization called ‘Add Custom
Button and Handle its OnClick Event’. Because I have already added the Code Customization, you do not need to do
this step. So we need to look at the coding behind the scenes. Click on our safe class file, LostPassword.aspx.vb.
You may need to expand the section in order to see the code. Those of you who have Microsoft Visual Studio
.NET installed may choose to open the project file and review our code sample that way.
Note: I am presuming at this point that you have a valid SMTP server installed and configured either on your
development machine or within your domain. If you need help in this area, please read the article,
"Deploying Applications To A Production Server".
Private Sub OnButton_Click(ByVal sender As System.Object, _
ByVal e As System.EventArgs)
' Add business logic for OnClick event.
Try
Dim rec As EmployeesRecord = EmployeesTable.instance.GetRecord("Email = '" & Me.Textbox.Text.Trim() & "'")
If Not rec Is Nothing Then
Dim email As New BaseClasses.Utils.MailSender
Dim strcontent As String = ""
email.AddFrom("support@milestone.ca")
email.AddTo(Me.Textbox.Text.Trim())
email.SetSubject("Resend Password")
strContent += "Milestone Software: Customer Management Application" & VbCrLf
strContent += VbCrLf
strcontent += "Name: " & rec.FirstName & " " & rec.Lastname & VbCrLf
strcontent += "Email: " & rec.email & VbCrLf
strcontent += "Login: " & rec.login & VbCrLf
strContent += "Password: " & rec.password & VbCrLf
email.Setcontent(strContent)
email.SendMessage()
Baseclasses.Utils.Miscutils.Registerjscriptalert(Me.page,"email","Password sent")
' Me.Page.Response.Redirect("PasswordSent.aspx")
Else
Baseclasses.Utils.Miscutils.Registerjscriptalert(Me.page,"email","Please enter a valid email address")
End If
Catch ex As System.Exception
' Handle exceptions.
Baseclasses.Utils.Miscutils.Registerjscriptalert(Me.page,"email",ex.Message)
End Try
End Sub
|
I am trying to retrieve a valid employee record based upon the email address that the user has entered
from our Lost Password screen. If the record is found, an email will be sent based upon the email address
entered.
I have included basic information, including the persons name, email login ID and password. Here is where
you can modify to suit, adding or removing information that you want. You could easily add an HTML template
for example, and produce a stunning look and feel for your customers.
I have kept things simple for our example. If the lookup was successful, then I notify the user via a popup
message. I do the same thing if it was not successful as well.
|
