Password Forgotten - Error: The Email Address was not found in our records;
Hello Everyone,
We've got a client, she successfully made a purchase online July 2014. She forgot her password and when she uses the "Password Forgotten" feature she gets "Error: The Email Address was not found in our records; please try again.". We checked her account in Zen admin and her email address is correct. Her email address is also in phpmyadmin under customers_email_address. We also attempted to change her email to one of our email addresses and get the same error.
Has anyone bumped into this issue and resolved it?
Any help is appreciated..thanks!
Paul
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
kcb410
Hello Everyone,
We've got a client, she successfully made a purchase online July 2014. She forgot her password and when she uses the "Password Forgotten" feature she gets "Error: The Email Address was not found in our records; please try again.". We checked her account in Zen admin and her email address is correct. Her email address is also in phpmyadmin under customers_email_address. We also attempted to change her email to one of our email addresses and get the same error.
Has anyone bumped into this issue and resolved it?
Any help is appreciated..thanks!
Paul
Was her account created as part of a PayPal Express Checkout transaction where you'd configured the store to "NOT automatically create an account"? (In such cases, it DOES create an account, but flags it as "for internal use only" and doesn't allow login). Or have you used any other addons to alter the built-in checkout or account functionality?
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
DrByte
Was her account created as part of a PayPal Express Checkout transaction where you'd configured the store to "NOT automatically create an account"? (In such cases, it DOES create an account, but flags it as "for internal use only" and doesn't allow login). Or have you used any other addons to alter the built-in checkout or account functionality?
Hi DrByte,
She paid using AMEX not through Paypal. The only addon we had installed altering checkout was COWOA. I could get her to create a new account but was hoping to avoid that path...
Thanks for the reply.
Paul
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
kcb410
Hi DrByte,
She paid using AMEX not through Paypal. The only addon we had installed altering checkout was COWOA. I could get her to create a new account but was hoping to avoid that path...
Thanks for the reply.
Paul
If not through PayPal to accept the use of AMEX, what payment processor was used?
Re: Password Forgotten - Error: The Email Address was not found in our records;
Just to note that the message
Code:
Error: The Email Address was not found in our records; please try again.
doesn't come from Zen Cart core code. There might be something else going on in your store's password_forgotten page's handling.
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
mc12345678
If not through PayPal to accept the use of AMEX, what payment processor was used?
We use Beanstream.
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
lat9
Just to note that the message
Code:
Error: The Email Address was not found in our records; please try again.
doesn't come from Zen Cart core code. There might be something else going on in your store's password_forgotten page's handling.
Okay ... Interesting, I'll have to compare our password_forgotten to a fresh 1.54 version.
This error is only happening with one clients account, the password forgotten functions normally for other clients and our test account.
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
kcb410
Okay ... Interesting, I'll have to compare our password_forgotten to a fresh 1.54 version.
This error is only happening with one clients account, the password forgotten functions normally for other clients and our test account.
A part of pci compliance (and I am no expert on such) is to not offer a different response for one aspect of credential failure than another... If that message is in fact displayed then one could try time and again to identify what email addresses are in the database and from there continue to either try passwords or use that information (existence of the email) for other purposes...
ZC 1.5.4 does not identify what was entered wrong, just that the credentials are incorrect (using whatever words are provided). This is the case in all such credential check, query, etc... (Forgotten password on store and admin side, login of both, etc...)
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
mc12345678
A part of pci compliance (and I am no expert on such) is to not offer a different response for one aspect of credential failure than another... If that message is in fact displayed then one could try time and again to identify what email addresses are in the database and from there continue to either try passwords or use that information (existence of the email) for other purposes...
ZC 1.5.4 does not identify what was entered wrong, just that the credentials are incorrect (using whatever words are provided). This is the case in all such credential check, query, etc... (Forgotten password on store and admin side, login of both, etc...)
I justed checked our password_forgotten file against a clean version and they're identical, the "Error: The Email Address was not found in our records; please try again." does exist in that file.
Re: Password Forgotten - Error: The Email Address was not found in our records;
Quote:
Originally Posted by
kcb410
I justed checked our password_forgotten file against a clean version and they're identical, the "Error: The Email Address was not found in our records; please try again." does exist in that file.
Clean version as obtained from what plugin or other additional code. That statement is not in a vanilla install of ZC 1.5.4.
