c# - 在 kentico 10 中使用 PBKDF2 加密设置密码

Question

我必须从 Excel 工作表向 CMS.User 表(名字、姓氏、用户名、电子邮件、用户密码和用户密码格式)上传大约 500 个用户。

如何将密码加密保存到数据库中？

var newUser = new UserInfo
{
    UserName = userDto.Email,
    UserEnabled = true,
    FirstName = userDto.FirstName,
    LastName = userDto.LastName,
    FullName = userDto.FirstName + " " + userDto.LastName,
    Email = userDto.Email,
    UserPasswordFormat = userDto.UserPasswordFormat,                
    SiteIndependentPrivilegeLevel = CMS.Base.UserPrivilegeLevelEnum.None
};

var newUserSettings = newUser.UserSettings ?? new UserSettingsInfo();

newUser.SetValue("UserPassword", userDto.UserPassword);

newUserSettings.UserPhone = userDto.PhoneNumber;

UserInfoProvider.SetUserInfo(newUser);

UserInfoProvider.AddUserToSite(newUser.UserName, site.SiteName);

Answer 1

在你的代码中而不是

newUser.SetValue("UserPassword", userDto.UserPassword);

你应该使用:

UserInfoProvider.SetUserInfo(newUser); // saves user to DB
UserInfoProvider.SetPassword(newUser, userDto.UserPassword); // saves hashed password

Kentico 也使用 CMSHashStringSalt 应用程序设置来散列密码。