generating customer passwords v1.3.0.1

[rebecca_L]

Zen cart 1.3.0.1 PHP 5.2.17 on Linex Mysql 5.0.51a

We have a problem with users when they receive their password or request a new password using the "forgotten password" module.
Some generated passwords contain 0 (zeros) and upper and lower case of the letter O. The users have a very difficult time telling the difference and usually end up getting an error message on login so they call the store for help.
Is there a way to prevent the use of zero and the letter O in the generation of passwords?

Thanks
RL

[gaurav10feb]

better just use password containing characters only

for that

includes>>modules>>pages>>password_forgotten>>header.php

look for

$new_password = zen_create_random_value( (ENTRY_PASSWORD_MIN_LENGTH > 0 ? ENTRY_PASSWORD_MIN_LENGTH : 5) );

change to

$new_password = zen_create_random_value( (ENTRY_PASSWORD_MIN_LENGTH > 0 ? ENTRY_PASSWORD_MIN_LENGTH : 5), chars );

[DrByte]

Zen cart 1.3.0.1 PHP 5.2.17 on Linex Mysql 5.0.51a

We have a problem

You REALLY need to upgrade ASAP, or you're going to have even more problems.

[rebecca_L]

Thank you. I will give your edit suggestion a try. We're having a sale right now so I'll wait until it's over.
As to the version upgrade..I know I should do it but I took over maintenance on this site from someone else. I may not be using the correct terminology but it doesn't look like there are any overrides. Some of the edits are in the original files. I had another Zen cart website several years ago and I remember copying any files I needed to change to another directory before I changed them. I'm worried about writing over files that I need.
The only way I can think to get around this is to go through each file and if they have been customized, copy them to the appropriate location. Once I've got the system fixed then I can upgrade.
Am I wrong thinking or over thinking this? I don't want to break the website with an upgrade.
Thank you for your help so far.
Rebecca

[gjh42]

Yes, if the file edits are in the original locations instead of template override folders, you will need to compare and copy the appropriate files before upgrading. That is similar to the beginning of the regular upgrade process, identifying all of your customizations.

[rebecca_L]

Thanks for all your help. I found an upgrade guide and will work my way through it. It doesn't seem difficult just time consuming. Oh well it has to be done sometime.

Thanks again for your help.
Rebecca

[antoniobb]

better just use password containing characters only

for that

includes>>modules>>pages>>password_forgotten>>header.php

look for

$new_password = zen_create_random_value( (ENTRY_PASSWORD_MIN_LENGTH > 0 ? ENTRY_PASSWORD_MIN_LENGTH : 5) );

change to

$new_password = zen_create_random_value( (ENTRY_PASSWORD_MIN_LENGTH > 0 ? ENTRY_PASSWORD_MIN_LENGTH : 5), chars );

Hi, what would be the right code to make the new password numbers only, so instead of Chars something like nums?

[DrByte]

'digits'