It may be by design, but when installing 1.5.8, the installer no longer prompts me to change the admin password.
Printable View
It may be by design, but when installing 1.5.8, the installer no longer prompts me to change the admin password.
You will get a password change prompt after you complete the upgrade when you login (if it's a new install and you have been given a temporary password).
Could be something I'm missing, but with a new install of 1.5.8, at the point where you input the temporary password to log in, the installer used to prompt for a password change, and it doesn't any more. I can use the temporary password unless I change it manually in Admin. I haven't tried an upgrade.
Sorry to be a pest about this, and maybe it isn't important, but after multiple fresh installations of 1.5.8 on several domains and different PHP versions, I can say that there is no prompt, as there was in previous versions, to change the admin password from the temporary password provided by the installer. No idea what happens during an upgrade.
Questions:
a) Are you using the official download or have you modified the zip to include a file that disables strict password checks?
b) Are you modifying your database to set PADSS_PWD_EXPIRY_ENFORCED to false?
I just tested it and it works fine for me. PHP 8.0.
Official download, no modifications. PHP 8.1.
Something wrong with my server configuration, I guess, though I've used the same host for Zencart for 20+ years without problem.
Maybe others can chime in with their experiences.
New database or upgrade?
Was install performed using https: version of your domain or http: and of those which were supplied as a part of the install information about accessing the site?
In my case, the database was created just before starting the installation. I installed using http:. I'm not sure what the second part of your question means.
As you step through zc_install, it asks for the browser path entered to get to your site. The question is if the https: version of the browser path was entered there.
Does your or "this" site have an ssl certificate? Following through the install code of the 1.5.8, I don't see that a password reset would be requested on a new install if all browser paths are http: or all https: a follow on database install/upgrade may then respond differently, but the discussion here has been a brand new install via zc_install and first accessing the admin with the credentials generated on new install.