### Author:  [@j127](https://meta.discourse.org/u/j127)
#### Post date: [October 6, 2017, 6:17pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/1 "2017-10-06T18:17:04Z")
Has anyone imported Drupal 7 passwords into Discourse? This is one area where I’m stuck on my migration.
I found [this plugin](https://github.com/communiteq/discourse-migratepassword/blob/master/plugin.rb) and [this](https://stackoverflow.com/a/19274472/1365699) [info](https://api.drupal.org/api/drupal/includes%21password.inc/7.x), but am not sure how to modify it for Drupal 7.
If I don’t migrate the passwords (leaving the `password_hash` and `salt` fields as `nil`), will users still be able to request new passwords? I’m a little worried about that in either case, because there are 20,000 users, and they will start getting summary emails from Discourse, which might send a lot of people to the site at once. If there is a bug with passwords or resetting them, things might get chaotic.
Temporary email address were saved during the last test import – something like `tmpemail111@example.com`. I don’t know why the first part of that email address was used for the `name` field and why the `email` field is blank. The email address does appear on the site itself for this user.
Is enough data included here in this sample user to have the new site run correctly in production?
```
=> [#]
```
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [October 6, 2017, 10:00pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/2 "2017-10-06T22:00:44Z")
> [@j127](#):
>
> If I don’t migrate the passwords (leaving the password\_hash and salt fields as nil), will users still be able to request new passwords?
Yes, and having your users change to decent passwords isn’t a bad idea anyway.
> [@](#):
>
> I’m a little worried about that in either case, because there are 20,000 users, and they will start getting summary emails from Discourse, which might send a lot of people to the site at once.
Yeah. You might disable summary emails, either for the whole site, or, do a rails console command to turn it off for each user and provide instructions for turning it on if they want it.
> [@](#):
>
> Temporary email address were saved during the last test import – something like [tmpemail111@example.com](mailto:tmpemail111@example.com). I don’t know why the first part of that email address was used for the name field and why the email field is blank.
If the email addresses are wrong, and they can’t receive a password reset email , then they can’t reclaim their accounts. Even if they could log in, they couldn’t change their email address,
What importer did you use? It sounds broken. Are the email addresses and names not in the database?
---
### Author:  [@j127](https://meta.discourse.org/u/j127)
#### Post date: [October 6, 2017, 10:13pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/3 "2017-10-06T22:13:26Z")
> [@pfaffman](#):
>
> If the email addresses are wrong, and they can’t receive a password reset email , then they can’t reclaim their accounts. Even if they could log in, they couldn’t change their email address,
>
> What importer did you use? It sounds broken. Are the email addresses and names not in the database?
It’s a custom importer that I’m working on, based on the `drupal.rb` (Drupal 7) importer that comes with Discourse. The temporary email is just for the test runs – just to be sure that my laptop doesn’t accidentally notify all the users to visit `localhost:3000` while I’m working on it. 🙂
I’ll switch this out for the real email address when I run the final import:
```
create_users(@client.query(q)) do |row|
{ id: row['id'], username: row['name'], email: "tmpemail#{row['id']}@my_domain.com", created_at: Time.zone.at(row['created']) }
end
```
> Yes, and having your users change to decent passwords isn’t a bad idea anyway.
I think that some of them are going to disagree, but maybe that’s best.
The user profile can display the temporary email address:
but the database shows `nil` for `email` and the first part of the email address ended up in `name`, which shouldn’t happen.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [October 6, 2017, 10:34pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/4 "2017-10-06T22:34:39Z")
You probably don’t have your laptop configured to send email, but for the reasons you outline I put something like this in all of the importers that I touch:
```plaintext
SiteSetting.disable_emails = true
SiteSetting.allow_index_in_robots_txt=nil
SiteSetting.login_required=true
```
> [@j127](#):
>
> but the database shows nil for email and the first part of the email address ended up in name, which shouldn’t happen.
Oh. Yeah. Email’s not stored in the user table anymore. If you go to /admin/users you can see them.
If you don’t include a name, it uses their username.
See [this post](https://meta.discourse.org/t/change-user-creation-date-for-multiple-users/70391/5) for a code sample that pulls email addresses.
---
### Author:  [@j127](https://meta.discourse.org/u/j127)
#### Post date: [October 6, 2017, 10:46pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/5 "2017-10-06T22:46:31Z")
> [@pfaffman](#):
>
> If you go to /admin/users you can see them.
Thanks. I can view the email addresses when visiting the individual user profiles, but they don’t appear in the list, except for the admin user I created in the terminal. Is that a bug?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [October 6, 2017, 10:49pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/6 "2017-10-06T22:49:02Z")
No. Not a bug. Emails are private. There is a show emails button at the top right of `/admin/users`.
---
### Author:  [@j127](https://meta.discourse.org/u/j127)
#### Post date: [October 17, 2017, 7:18pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/7 "2017-10-17T19:18:42Z")
> [@pfaffman](#):
>
> SiteSetting.disable\_emails = true
> SiteSetting.allow\_index\_in\_robots\_txt=nil
> SiteSetting.login\_required=true
@pfaffman - will that snippet work if I drop it within the import class something like this? Or is it better to run in the Rails console?
```ruby
class ImportScripts::Drupal < ImportScripts::Base
SiteSetting.disable_emails = true
SiteSetting.allow_index_in_robots_txt = nil
SiteSetting.login_required = true
##
# TODO: the MySQL database name gets loaded here
#
DRUPAL_DB = ENV['DRUPAL_DB'] || "tmp_deleteme"
##
# The `VID` is a vocabulary ID.
#
# ...
end
```
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [October 17, 2017, 7:27pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/8 "2017-10-17T19:27:09Z")
I usually add it to the `initialize` function.
---
### Author:  [@j127](https://meta.discourse.org/u/j127)
#### Post date: [October 17, 2017, 7:29pm UTC](https://meta.discourse.org/t/drupal-7-migration-questions/71539/9 "2017-10-17T19:29:52Z")
Thanks! Just about ready to run it for the live site. 🙂