Manual Install (Password Entry) Error - Bug?

Second Install did not go so well. During the install process of the Admin Password it throws out the "Password" not secure enough error

Quote:

---

Password not secure enough. Requires letters and numbers, and at least 7 characters. more info...

---

Tried many different types of passwords for testing and the server stats go along with the details.

Admin User: Beta1502011

Passwords Used:
(Note) These are randomly generated not actual passwords

ds[.]K*nt4wz
Z]Mb8o^JRslh
x39A2pTP[wdU
123..Beta__Test
crackle..snap__Pop
Shank__Da_Mention.123

Screenshot Attached

Server Stats:
Server IP: xx.xxx.xx.xxx
PHP: 5.2.17 and 5.3.6 (Both Versions Failed) {Two Servers}
MySql: 5.0.92-community
cPanel Version: 11.30.1-STABLE_99999
Apache version: 2.2.19

Status: New Install No Upgrade

It seems it's disliking the symbols you're using.
If you choose literally only letters/numbers it should work.
We'll investigate for allowing symbols as well in the final release.

Thanks..

I noticed that letters and numbers only worked in the first install but not the second, reason I brought it to attention is because depending on the PCI kit some merchants have for their users they do recommend crazy symbols and some points I seen processors require it which I thought was bizarre but least you know about it..

Quote:

---

PCI kit some merchants have for their users they do recommend crazy symbols and some points I seen processors require it

---

How would they know what password you have???

Quote:

---

Originally Posted by kobra

How would they know what password you have???

---

They do not know unless the business owner tells them. I was personally on conference with two customers which will be a "unspoken" processor asked them what password they were using so the bizarre part comes in the lady on the PCI Compliance team of that processor says we require letters, numbers and symbols to pass PCI compliance "Okay" was my exact words of course laughing internally to void showing he customer disrespect

But the point of the attention brought up was this if a new store owner knows nothing about it {PCI} they may take it to heart and literally try to put the password types I posted above so it comes down to this they say I am using a software that will not allow me to do this and the processor support member says simply "Change Software" that will and if this is done this takes away the support of ZenCart. To me it was a good point not a war starting statement

Adding to this paragraph.. Obviously the processor support team has minimal training hence knows nothing about what their kits really do other then what a manual tells them. All basic self questionnaires about 50 pages long.. :blink:

point taken and valid

BUT no one should ever reveal their password not even to a metrics outfit

Quote:

---

Originally Posted by kobra

point taken and valid

BUT no one should ever reveal their password not even to a metrics outfit

---

Agreed. I always stress that to the customers who ask me those same exact questions. NEVER NEVER not even your child if it can be avoided. We take security seriously and we do all we can to support this software and I like making strong points at times. If I had my way no other OS would even be existent today, just build ZenCart stronger and forget the rest... Just my two cents.. But coffee is like .99 now :cry:

Fixed in newly posted zip.

Confirmed using generated password

Code:

---

]!x0~2o~=d@P

---

good deal...