Drupal Tutorials and Blog Posts

This method uses a short PHP script. The code is below. First thing to do is copy this to your clipboard exactly as it's written. Paste this into a text or script editor and then save it with an arbitrary and random name. If you use a plain language name it will give you an error message telling you to rename it with a random string., and be sure to remove this file from your server immediately after you use it. This is a big security risk since anyone accessing this could change your administrator password.

<?php
define('DRUPAL_ROOT', getcwd());
require_once DRUPAL_ROOT . '/includes/bootstrap.inc';
drupal_bootstrap(DRUPAL_BOOTSTRAP_FULL);
 require_once DRUPAL_ROOT . '/includes/password.inc';
if (isset($_GET['pass']) && !empty($_GET['pass'])) {
$newhash = user_hash_password($_GET['pass']);
}
else {
die('Retry with ?pass=PASSWORD set in the URL');
}
$updatepass = db_update('users') 
 ->fields(array(
 'pass' => $newhash,
// 'name' => 'admin',
// 'mail' => 'yourmail@example.com';
 ))
 ->condition('uid', '1', '=')
 ->execute();
print "Done. Please delete this file immediately!";
drupal_exit();
?>

 

• Paste this in a plain text editor or script editor and save it with the name password.php (you can use any name you want. I just chose an arbitrary name.)
• Upload this to your Drupal home directory.
• Rename the file to something totally random.

• Go to http://yoursite.com/totalyrandom.php?pass=mypassword in the address bar of your browser.
• Replace "mypassword" with whatever you want to use as the password. The script accesses the Drupal password function and changes the password for you.

• This script can also be used to change the admin username and email as well.
• In the script itself uncomment the lines that deal with those (lines 19 and 20 in the image above) and change them to what you want. Remove the // marks from the beginning of the line, to uncomment them and make them active.

Here's what they look like with the comment marks removed.

• One you're done resetting passwords. Be sure to uninstall the php script you created by deleting it using FTP or your file manager.