Results 1 to 4 of 4
  1. #1
    Join Date
    Jul 2005
    Location
    Charlottesville, VA
    Posts
    431
    Plugin Contributions
    0

    Default Question about changing the admin password

    Hello's again.

    We had an intrusion at our web host. Some Turk1sh h4ck3r guy replaced the root index.htm (which was just a redirect) and dumped some php scripts into an uploads directory.

    So I'm in the process of changing lots of passwords. (wish my web host had secure FTP but, sigh, no.)

    I see in Admin > tools > Admin settings where I can change the admin password, that's cool.

    But how does that affect the non-writeable configuration files for database connectivity?


    Is it adviseable to change the database user passwords too (using PhpMyAdmin), and if so, how do I get those passwords into the config files? They are stored in the database encrypted, right? Looks like the configuration.php files also have the encrypted version of the admin password.

    I am wondering what is the correct procedure, so I don't detach ZC from its beloved database.

    ---Diana

  2. #2
    Join Date
    Feb 2006
    Location
    Chicago
    Posts
    1,162
    Plugin Contributions
    0

    Default Re: Question about changing the admin password

    Hi dbrewster

    Database info is stored in
    includes\configure.php and admin\includes\configure.php

    admin\includes\configure.php: define('DB_SERVER_USERNAME', 'root');
    admin\includes\configure.php: define('DB_SERVER_PASSWORD', 'root');

    includes\configure.php: define('DB_SERVER_USERNAME', 'root');
    includes\configure.php: define('DB_SERVER_PASSWORD', 'root');


    Just make sure to change the above lines

    Please let us know if you have any further questions
    Tutorials on Zen Cart
    http://tutorials.zen-cart.com/index.php
    ---------------
    advanced.programmer at gmail dot com
    In love with Zen Cart!!

  3. #3
    Join Date
    Jul 2005
    Location
    Charlottesville, VA
    Posts
    431
    Plugin Contributions
    0

    Default Re: Question about changing the admin password

    Superprg,

    thanks for the reply. I am aware of the configure.php files.

    I still have a few questions.

    Do I need to make the same user/pwd changes to the database as well? Are they completely separate, or must they be the same?

    Are these settings completely separate from the admin login user account? If I change my admin pwd in Admin > Tools > Admin settings I can still use a completely distinct database user account?

    Are the database user passwords stored unencrypted?

    Thanks in advance for speedy answers, so I can get my passwords changed pronto.
    Last edited by dbrewster; 17 Aug 2006 at 05:45 PM.

  4. #4
    Join Date
    Feb 2006
    Location
    Chicago
    Posts
    1,162
    Plugin Contributions
    0

    Default Re: Question about changing the admin password

    Quote Originally Posted by dbrewster
    Superprg,

    thanks for the reply. I still have a few questions.

    Do I need to make the same user/pwd changes to the database as well? Are they completely separate, or must they be the same?

    Zen cart will read database user/password from above files to connect to database
    If you are changing this info in the file, then database password must also be changed


    Quote Originally Posted by dbrewster
    Are these settings completely separate from the admin login user account? If I change my admin pwd in Admin > Tools > Admin settings I can still use a completely distinct database user account?
    Yes,
    Admin user and password is completelly seperate from database user/password.
    Changing admin password has no effect on database change. It just changes the admin password and nothing else

    Are the database user passwords stored unencrypted?
    Yes, all mysql passwords are stored in encrypted form in user table in mysql database
    Tutorials on Zen Cart
    http://tutorials.zen-cart.com/index.php
    ---------------
    advanced.programmer at gmail dot com
    In love with Zen Cart!!

 

 

Similar Threads

  1. Changing Password in the Admin Panel
    By 4kidz in forum General Questions
    Replies: 2
    Last Post: 29 Jul 2009, 04:09 PM
  2. Replies: 2
    Last Post: 17 Aug 2007, 05:26 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR