Unable to reset hesiacp password

shiva1 · September 9, 2020, 10:29am

Though i enter correct username and admin email to reset password I always get error invalid host domain

Is their any setting inside panel to set up custom smtp or how to make this reset password working?

Please help me with the process if I miss something.

Thank you

eris · September 9, 2020, 10:47am

How do you access the panel?

github.com

hestiacp/hestiacp/blob/789a2b09b647f722e593a3bd0f3fe95bde864b65/web/reset/index.php#L39-L46


if (in_array(str_replace(':'.$_SERVER['SERVER_PORT'],'.conf',$_SERVER['HTTP_HOST']), array_merge(scandir('/etc/nginx/conf.d'),scandir('/etc/nginx/conf.d/domains'),scandir('/etc/apache2/conf.d/domains'),scandir('/etc/apache2/conf.d')))){
    $mailtext .= sprintf(_('PASSWORD_RESET_REQUEST'),$_SERVER['HTTP_HOST'],$user,$rkey,$_SERVER['HTTP_HOST'],$user,$rkey);
    if (!empty($rkey)) send_email($to, $subject, $mailtext, $from);
    header("Location: /reset/?action=code&user=".$_POST['user']);
    exit;
} else {
    $ERROR = "<a class=\"error\">"._('Invalid host domain')."</a>";
}

And does this domain exists in the Hestia some where?

shiva1 · September 9, 2020, 11:25am

I am accessing panel using Nginx reverse proxy from another domain …

like setting https:// anotherdomain.com reverse proxy to hestiacp machine IP : port

eris · September 9, 2020, 11:26am

Access server directly over ip:port or via a know domain in the software.

Or login with ssh and run

v-change-user-password admin “new_password”

It was done due to a security breach as “Hackers” are able to get the “reset” token + account name and where able to gain access to the server.

shiva1 · September 9, 2020, 11:30am

Thank you so much Great help

armanalifokir · August 2, 2021, 3:52am

matter i am not a hacker but sometimes may i need passwword reset. then how i reset that.

Raphael · August 2, 2021, 5:22am

It’s written im @eris post where you answered to… Unable to reset hesiacp password - #4 by eris

Also, please do not revive a year old thread…