protected void PasswordRecovery1_VerifyingAnswer(object sender, LoginCancelEventArgs e)
		{
			e.Cancel = true;
			MembershipUser user = Membership.GetUser(PasswordRecovery1.UserName);
			string answer = PasswordRecovery1.Answer;
			if (user != null)
			{

				if (user.PasswordQuestion.Equals(answer))
				{
					e.Cancel = false;
				}
			}
		}

protected void PasswordRecovery1_AnswerLookupError(object sender, EventArgs e)
		{
			PageContext.AddLoadMessageSession(GetText("QUESTION_FAILURE"));
		}

public override bool ChangePassword(string username, string oldPassword, string newPassword)
{
    string salt = string.Empty;
    string str2 = string.Empty;
    if (!this.IsPasswordCompliant(newPassword))
    {
        return false;
    }
    UserPasswordInfo info = UserPasswordInfo.CreateInstanceFromDB(this.ApplicationName, username, false, this.UseSalt, this.HashHex, this.HashCase, this.HashRemoveChars, this.MSCompliant);
    if (info == null)
    {
        return false;
    }
    if (!info.IsCorrectPassword(oldPassword))
    {
        return false;
    }
//here begin
    if (this.UseSalt)
    {
        salt = GenerateSalt();
    }
//here end
    str2 = EncodeString(newPassword, (int) this.PasswordFormat, salt, this.UseSalt, this.HashHex, this.HashCase, this.HashRemoveChars, this.MSCompliant);
    DB.ChangePassword(this.ApplicationName, username, str2, salt, (int) this.PasswordFormat, info.PasswordAnswer);
    return true;
}

public static void ChangePassword(string appName, string username, string newPassword, string newSalt, int passwordFormat, string newPasswordAnswer)
		{
			using (SqlCommand command = new SqlCommand(DBAccess.GetObjectName("prov_changepassword")))
			{
				command.CommandType = CommandType.StoredProcedure;
				command.Parameters.AddWithValue("@ApplicationName", appName);
				command.Parameters.AddWithValue("@Username", username);
				command.Parameters.AddWithValue("@Password", newPassword);
				command.Parameters.AddWithValue("@PasswordSalt", newSalt);
				command.Parameters.AddWithValue("@PasswordFormat", passwordFormat);
				command.Parameters.AddWithValue("@PasswordAnswer", newPasswordAnswer);
				DBAccess.ExecuteNonQuery(command);
			}
		}

if (this.UseSalt && String.IsNullOrEmpty(info.PasswordSalt))
{
	salt = GenerateSalt();
}
else
{
	salt = info.PasswordSalt;
}