As I previously demonstrated, creating these Web forms is simple and painless; however, what if you want to customize the functionally behind these Web forms? This also is a straightforward process, but there is a little more effort required on your part. Use the web.config file to customize the settings. Take a look a Listing 3 below.

Listing 3: Custom AspNetSqlMembershipProvider Settings

<membership>

  <providers>

    <remove name="AspNetSqlMembershipProvider"/>

    <add name="AspNetSqlMembershipProvider"

      type="System.Web.Security.SqlMembershipProvider,

            System.Web, Version=2.0.0.0, Culture=neutral,

            PublicKeyToken=b03f5f7f11d50a3a"

      connectionStringName="LocalSqlServer"

      enablePasswordRetrieval="true"

      enablePasswordReset="true"

      requiresQuestionAndAnswer="false"

      applicationName="/"

      requiresUniqueEmail="true"

      passwordFormat="Encrypted"

      maxInvalidPasswordAttempts="3"

      minRequiredPasswordLength="6"

      minRequiredNonalphanumericCharacters="2"

      passwordAttemptWindow="10"

      passwordStrengthRegularExpression="" />

  </providers>

</membership>

The customization I am referring to is:

1. Enable Password Retrieval
2. Require Question and Answer
3. Requires Unique Email
4. Password Format
5. Maximum Invalid Password Attempts
6. Minimum Required Password Length
7. Minimum Required Non-Alphanumeric Characters

While you could always modify the machine.config file, I do not recommend this course of action because in most cases no two applications will have the exact same requirements when it comes to Membership.

Customize the Web Forms

Take the Web forms you previously created and customize them to your needs. For the sake of brevity, I will cover the registration Web form; however, the others are included in the sample code. Since we are not going to require the user to enter a question and answer in the case of a forgotten password, we must modify our Web form (see Figure 7).

To accomplish this step, click the Customize Create User Step as shown in figure 10.

Figure 10: Customize Create User Step

Once you have performed this action, you can then remove the two rows that contain the labels, text fields, and required field validators. Save these changes, and at this point your Web form should look similar to Figure 11.

Figure 11: Customized Registration Web Form

Next, open the PasswordRecovery Web form and delete the QuestionTemplate section. At this point, your Web forms have been customized to meet the specifications of this article, but there are a few more steps you will need to accomplish in order to send the user his or her password via email.

MailDefinition Behavior of the PasswordRecovery Control

As I previously discussed about sending users their password, there are a couple of steps we must accomplish. First, we need to once again modify the web.config file to hold the necessary SMTP setting that we will be utilizing to send these types of emails.

Listing 4: SMTP Settings