Hello,

My client wishes to allow a user to login to the website, change/add data, and then they need to click a button that produces a PDF with that data.

For "extra" security reasons, the module I am creating must ask for the password a 2nd time (even though the user is logged in), it needs to verify  that the password is correct, and then PDF can be created.

It would be great to get the clear text of the password, because then I would just use that as the password for the pdf.  I want to say this is impossible since it is a 1-way hash, but correct me if I am wrong.

If I could just pass in the entered password and have it return something that would suggest that the password is indeed correct, I could move on.

Thanks for your time.

Chad

The ValidatePassword function only checks the web.config for needed strength of password.  That is why I was getting conflicting results.

So I am back to square one.

Getting the clear text password can be tricky, but depending on your setup / web.config settings / userbase it could be impossible to decrypt the stored value. However, if things are setup so you can retrieve the password, in the past I've used DotNetNuke.Entities.Users.UserController.GetPassword(DotNetNuke.Entities.Users.UserController.GetCurrentUserInfo, String.Empty) to pull the password and hack SSO with OWA and a few other random web applications.