Admin Login issue "You entered the wrong username or password."

[Painted Hills NB]

I apologize for the length of this post, it is my attempt at provding all the information up front of the issue, solutions tried and results.

I make updates weekly on Mondays and Tuesdays. These updates include inventory counts, images, and text content. Last week, no issue logging in.
Yesterday - Monday - morning when I attempted to log in I received the error message "You entered the wrong username or password." After a second attempt I then manually entered then a fourth attempt by copy and paste the login info - all to no avail.

I then attempted to resend password and received the error message "You entered the wrong email address." After several attempts I gave it a break. I cleared the cache and rebooted my pc. After several hours I tried again. Same issues. I tried again this morning. Cleared cache in both browsers. Same results.

When making my weekly updates I access and make changes to Products, Categories, various pages using Define pages editor and/or EZpages.

Website URL: www.natural-beef.com
Login URL: http://www.natural-beef.com/administratorarea for first id and password then https://www.natural-beef.com/adminis...vedbymoderator for second.
Browser: IE9 and Firefox 19 - both set to save passwords.
Zen Cart v1.3.9h
PHP version 5.3.17
MySQL version 5.1.68-cll
Web host Operating system: Linux

This thread discussed the issue I am having, but the issue was resolved at the webhost level and the solution was not posted. http://www.zen-cart.com/showthread.p...rname+password.

Besides clearing the cache and rebooting, here are the steps I have taken so far:

1. Checked the /cache/ folder and there are no myDebug-xxxxxx.log since last month.

2. Attempted to create a temporary admin account in order to log in following the instructions here:
http://www.zen-cart.com/content.php?...28i-lost-it%29
and received the error message "Missing value in the form!"

** NOTE: When I checked the database from phpMyAdmin (localhost » database » admin) I noted that admin_name and admin_pass are different than my login information. Additionally admin_email is blank. I use a double login - meaning there are two admin names and two passwords, however in the database there is only one listed.
admin_id is 1, and admin_level is 0.
Since I am unable to create a temporary admin account can I change the information here? So now I must ask...have we been hacked?

3. Verified SSL https://www.natural-beef.com/

4. Verified SSL support enable in Zen Cart
includes/configure.php
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.natural-beef.com');
define('HTTPS_SERVER', 'https://www.natural-beef.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

admin/includes/configure.php
define('HTTP_SERVER', 'http://www.natural-beef.com');
define('HTTPS_SERVER', 'https://www.natural-beef.com');
define('HTTP_CATALOG_SERVER', 'http://www.natural-beef.com');
define('HTTPS_CATALOG_SERVER', 'https://www.natural-beef.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

5. Compared the two configure.php files ...
/includes/configure.php
/admin/includes/configure.php
As far as I can see they match - however I am not sure what else I should be looking for.


6. Checked in cPanel - there is the following Error Logs
Today
[Tue Apr 09 14:20:04 2013] [error] [client 157.56.93.94] File does not exist: /home/natural1/public_html/404.shtml
[Tue Apr 09 14:20:04 2013] [error] [client 157.56.93.94] File does not exist: /home/natural1/public_html/robots.txt
[Tue Apr 09 14:17:46 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/404.shtml
[Tue Apr 09 14:17:46 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/favicon.ico
[Tue Apr 09 14:17:43 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml

Yesterday
[Mon Apr 08 19:15:20 2013] [error] [client 71.190.187.196] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:15:20 2013] [error] [client 71.190.187.196] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 19:07:21 2013] [error] [client 67.225.164.12] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:07:21 2013] [error] [client 67.225.164.12] File does not exist: /home/natural1/public_html/www.facebook.com
[Mon Apr 08 19:02:40 2013] [error] [client 54.224.131.98] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:02:40 2013] [error] [client 54.224.131.98] File does not exist: /home/natural1/public_html/icons
[Mon Apr 08 18:53:42 2013] [error] [client 74.221.28.119] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:53:42 2013] [error] [client 74.221.28.119] File does not exist: /home/natural1/public_html/control
[Mon Apr 08 18:34:47 2013] [error] [client 184.153.208.1] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:34:47 2013] [error] [client 184.153.208.1] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:28:42 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:28:42 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:28:38 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:28:38 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:26:30 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:26:30 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:24:16 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:24:16 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:55 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:55 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:53 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:53 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:52 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:52 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:49 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml
[Mon Apr 08 18:18:50 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:50 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:18:32 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:32 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:18:12 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:12 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:13:16 2013] [error] [client 199.30.16.44] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:13:16 2013] [error] [client 199.30.16.44] File does not exist: /home/natural1/public_html/robots.txt
[Mon Apr 08 17:59:01 2013] [error] [client 50.45.190.246] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:59:01 2013] [error] [client 50.45.190.246] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:58:41 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml
[Mon Apr 08 17:57:07 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:57:07 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:56:29 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:56:29 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:56:03 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:56:03 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:48 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:48 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:46 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:46 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:18 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:18 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico

[kobra]

I noted that admin_name and admin_pass are different than my login information.
I use a double login - meaning there are two admin names and two passwords, however in the database there is only one listed.

Not sure how or what you are using for a double login??

Since I am unable to create a temporary admin account can I change the information here? So now I must ask...have we been hacked?

Quite possibly

[Painted Hills NB]

Not sure how or what you are using for a double login??

This is how it was set up when I got the project. There is a 1st Username and password, then a second. When I go to https://www.my-site.com/administratorarea/ a popup window prompts me for the 1st set, that takes me to the login panel which is where I enter the 2nd Username and password. I am unable to get past the second login.

Quite possibly

Well...that's informative...

[DrByte]

Since I am unable to create a temporary admin account can I change the information here?

You can change everything except the password there. The password is encrypted, so anything you put there will not make sense.

So now I must ask...have we been hacked?

There is no evidence here to indicate one way or the other.
The best way to determine that is to do a thorough site assessment yourself: http://www.zen-cart.com/wiki/index.p...ing_From_Hacks ... follow all the steps until you've satisfied yourself that there was no intrusion and no damages done and no cleanup needed.

6. Checked in cPanel - there is the following Error Logs
Today
[Tue Apr 09 14:20:04 2013] [error] [client 157.56.93.94] File does not exist: /home/natural1/public_html/404.shtml
[Tue Apr 09 14:20:04 2013] [error] [client 157.56.93.94] File does not exist: /home/natural1/public_html/robots.txt
[Tue Apr 09 14:17:46 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/404.shtml
[Tue Apr 09 14:17:46 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/favicon.ico
[Tue Apr 09 14:17:43 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml

Yesterday
[Mon Apr 08 19:15:20 2013] [error] [client 71.190.187.196] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:15:20 2013] [error] [client 71.190.187.196] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 19:07:21 2013] [error] [client 67.225.164.12] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:07:21 2013] [error] [client 67.225.164.12] File does not exist: /home/natural1/public_html/www.facebook.com
[Mon Apr 08 19:02:40 2013] [error] [client 54.224.131.98] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 19:02:40 2013] [error] [client 54.224.131.98] File does not exist: /home/natural1/public_html/icons
[Mon Apr 08 18:53:42 2013] [error] [client 74.221.28.119] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:53:42 2013] [error] [client 74.221.28.119] File does not exist: /home/natural1/public_html/control
[Mon Apr 08 18:34:47 2013] [error] [client 184.153.208.1] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:34:47 2013] [error] [client 184.153.208.1] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:28:42 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:28:42 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:28:38 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:28:38 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:26:30 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:26:30 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:24:16 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:24:16 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:55 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:55 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:53 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:53 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:52 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:23:52 2013] [error] [client 66.77.17.14] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:23:49 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml
[Mon Apr 08 18:18:50 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:50 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:18:32 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:32 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:18:12 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:18:12 2013] [error] [client 71.20.12.193] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 18:13:16 2013] [error] [client 199.30.16.44] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 18:13:16 2013] [error] [client 199.30.16.44] File does not exist: /home/natural1/public_html/robots.txt
[Mon Apr 08 17:59:01 2013] [error] [client 50.45.190.246] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:59:01 2013] [error] [client 50.45.190.246] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:58:41 2013] [error] [client 69.88.251.206] File does not exist: /home/natural1/public_html/401.shtml
[Mon Apr 08 17:57:07 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:57:07 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:56:29 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:56:29 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:56:03 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:56:03 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:48 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:48 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:46 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:46 2013] [error] [client 174.22.9.37] File does not exist: /home/natural1/public_html/favicon.ico
[Mon Apr 08 17:55:18 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/404.shtml
[Mon Apr 08 17:55:18 2013] [error] [client 75.147.189.218] File does not exist: /home/natural1/public_html/favicon.ico

You can prevent all those by adding a favicon to your site. Those 404s are a result of file-not-found when browsers are looking for the favicon. Just create the appropriate file and upload it to your public_html folder on your server. Nothing special about it as far as Zen Cart goes. You can find all kinds of technical details and even online tools to convert a company logo to a favicon graphic free by merely loading it into a webpage and downloading the converted image. Works best if you start with a square image though.

[Painted Hills NB]

You can change everything except the password there. The password is encrypted, so anything you put there will not make sense.

There is no evidence here to indicate one way or the other.
The best way to determine that is to do a thorough site assessment yourself: http://www.zen-cart.com/wiki/index.p...ing_From_Hacks ... follow all the steps until you've satisfied yourself that there was no intrusion and no damages done and no cleanup needed.


You can prevent all those by adding a favicon to your site. Those 404s are a result of file-not-found when browsers are looking for the favicon. Just create the appropriate file and upload it to your public_html folder on your server. Nothing special about it as far as Zen Cart goes. You can find all kinds of technical details and even online tools to convert a company logo to a favicon graphic free by merely loading it into a webpage and downloading the converted image. Works best if you start with a square image though.

Thank you once again, DrByte for your assistance.

I have begun going through the recommended process, in the meantime...any suggestions on how to get logged in as the reset option did not work?

[DrByte]

2. Attempted to create a temporary admin account in order to log in following the instructions here:
http://www.zen-cart.com/content.php?...28i-lost-it%29
and received the error message "Missing value in the form!"

Sounds like you tried to fill in fields by editing an existing record, and not clicking the SQL tab and pasting the query from the FAQ article into the input field.

[Painted Hills NB]

Sounds like you tried to fill in fields by editing an existing record, and not clicking the SQL tab and pasting the query from the FAQ article into the input field.

Sounds like it...but not so. From localhost » database I then clicked on SQL. This gave me a screen with a box labled Run SQL query/queries on database database_name:
I copy and pasted the query into this box. Did I miss something?

[DrByte]

It really is as simple as copying and pasting the correct query for your ZC version into that box and clicking the submit button.

[kobra]

This gave me a screen with a box labled Run SQL query/queries on database database_name:

Or when in phpmyadmin you did not load (select) the database in question first

[lhungil]

Browser: IE9 and Firefox 19 - both set to save passwords.

I believe the current version of Zen Cart requests the browser not save the admin password... But I would probably make sure you cleared any saved passwords (and cookies) for your Zen Cart site.

... There is a 1st Username and password, then a second. When I go to "https:// www.my-site.com/administratorarea/" a popup window prompts me for the 1st set, that takes me to the login panel which is where I enter the 2nd Username and password. ...

The first prompt may be an Apache Authentication and Authorization configuration. Possibly in the "/admin" .htaccess file or the server configuration. Not something I'd worry about at the moment.

Sounds like it...but not so. From localhost » database I then clicked on SQL. This gave me a screen with a box labled Run SQL query/queries on database database_name:
I copy and pasted the query into this box. Did I miss something?

Doesn't sound like it... You pretty much just click your database from the list on the left in phpmyadmin (after it will say something like "servername > database" on the top), click the "SQL" tab, copy / paste from the article, change the prefix as needed, then press "Go". If all goes well you will have a nice new shiny "Admin" account. Just make sure to remove the account (or at least change the password) when done.

If you still cannot login... Going through the "recovering from hacks" article - especially "Check ALL your files for unauthorized changes" - should help you find if any files have been modified and are causing issues with you being able to login to the admin.