Login as Customer module

[Shane78]

cheers for the fast reply Diva, my site is an industrial supplies wholesale type site and i take 70% of orders via phone, so that's why i like the look of this mod.
Seems ok, i have not been able to recreate the problems some users have listed on this thread...

[DivaVocals]

You're very welcome! Glad I could be of some small bit of help..

cheers for the fast reply Diva, my site is an industrial supplies wholesale type site and i take 70% of orders via phone, so that's why i like the look of this mod.

Which is precisely why I suggested you give it a go.. When I used it I never experienced any of the issues reported here either.. It worked PERFECTLY for what we needed it for, but I can see how it would be tre useful for a mail order style of business..

Seems ok, i have not been able to recreate the problems some users have listed on this thread...

[Shane78]

hello all...

can someone tell me the known reasons why this mod is not recommend to be used on a ZC site?

are there security risks to using this mod?
any other risks to using this mod etc?

i have been told that although it is a popular mod, it is recommended against using this mod on a zc site.. but no reasons as why, problems it causes etc...

someone please advise, as i am in two minds if i should remove this mod from my site...

[tat2nu]

Ok, can someone help me with the merging so that I can use it on 1.3.9? Looks like the admin/customers.php and the includes/functions/password_funcs.php are the only two files that need work as far as I can tell.

Thanks,
Marc

[swguy]

hello all...

can someone tell me the known reasons why this mod is not recommend to be used on a ZC site?

The issue is that the login credentials are passed in plain text; they're not encrypted. If you scroll to the bottom of the contrib download page there's a brief discussion of this:

http://www.zen-cart.com/index.php?ma...roducts_id=829

I personally would prefer to see people use encrypted master password and stop there.

[tat2nu]

Ok, I have this working with 1.3.9d on my local machine using XAMPP but the only problem is that after I go to the admin>customers page and click on the "place order" image it takes me to the "index.php?main_page=login_as_customer" page but none of the customers information is showing. If I click on the "place order" image there it works just fine and logs me in as the customer but I would really like to see that information to be sure that I am not accidentally logging into the wrong account. Could this be just because I am on my local machine or is there a fix that I am unaware of?

The only other mods installed at this point are cherry_zen template and css flyout menu and everything was working perfectly before I started the login as customer add on.

Thanks,
Marc

[Blackthorne]

Awesome mod. Thanks so much!

[refreshmentshop]

There is a pretty serious issue with this mod.

If you login as a customer, place an order etc, but forget to logout... then go back into the admin and login as a new customer... It will appear that you are logging in as the new customer (Their details will be displayed on the login page)... but you are actually still logged in as the FIRST customer.

You can see the problems that this would cause.

What the script needs to do, is end any active sessions when the address conformation page comes up, that would solve the problem.

Sorry if this has been mentioned before, I didn't read through the whole thread.

[refreshmentshop]

Following on from what I said above... I've just added this code to tpl_login_as_customer_default.php

It doesn't stop you from logging in as the wrong customer, but at least it gives you a bit more of a warning before you do it.

<?php 

$cusid = $_SESSION['customer_id']; 

if ($cusid){ 
  echo '<div class="messageStackWarning">WARNING you are already logged in as customer: '.$cusid.' - '.$_SESSION['customer_first_name'].' '.$_SESSION['customer_last_name'].' - PLEASE LOG OUT FIRST</div>'; 
} 

?>

It doesn't really matter where you put it, I added it just above where it says: 'Are you sure you want to log in as'

If somebody wants to work out how to safely and properly destroy the session instead, that would be much better.

[nohart]

If you would like to remove this add on how do you go about removing the merged sql file. I don't see any uninstall routine for this patch to the database in the files included in this submission.