Admin account would not work

[ve39]

Hey guys,

For some reason i no longer can log in to my zen admin site. it always says that my username or password is incorrect.

I've tried this solution " https://www.zen-cart.com/tutorials/index.php?article=2 " and it worked but i have an "admin profiles" script installed so the admin account that i'm creating through SQL has not rights to do anything.

Please help. thank you

[kobra]

i have an "admin profiles"

I believe it adds 2 tables, maybe 3
Backuo those tables then delete them, normal permissions will return
Make your changes then restore the tables

[ve39]

can you tell me what tables to delete ? what would they be called ? and where will i find them ?

THanks

[kobra]

i have an "admin profiles" script installed

can you tell me what tables to delete ?

This is 3rd party so you will have to determine what was installed

[ve39]

is there an easier way? like resetting a password for already existing account through SQL by modifying this script ?


DELETE FROM admin WHERE admin_name = 'Admin';
INSERT INTO admin (admin_name, admin_email, admin_pass, admin_level)
VALUES ('Admin', 'admin@localhost', '351683ea4e19efe34874b501fdbf9792:9b', 1);

[ve39]

I figured it out. went into phpMyAdmin and changed password on one of the accounts to 351683ea4e19efe34874b501fdbf9792:9b


Well i was hacked, when i went into an admin section in SQL there was 12 admin accounts and i only had 2 also my account was renamed with different username and email. how i know it was my account is because it was id # 1

website was not touched in anyway i guess they were looking for CC info. but then again part of the cc number is email so they could not get much.

any ideas on how they could of get in ? ? ?

[kobra]

any ideas on how they could of get in ? ? ?

What version are you using?

i guess they were looking for CC info. but then again part of the cc number is email so they could not get much.

Check to who the cc module is now set to email to

[ve39]

I use 38b

they did not change CC email.

I have a filling that the admin profiles script somehow saved me here.

[kobra]

they did not change CC email.

Usually changed for a time and then back hoping you do not notice

Just consider that you have been hacked and do ALL the steps and upgrade - - No short cuts
http://www.zen-cart.com/wiki/index.p...ing_From_Hacks

[ve39]

I'm tiered of this, my account is getting hacked every 3 days.


I've done everything, including changing my SQL username and password.

I'm not ready to move from 1.38b

Could any one please let me know where admin account lays so i can just make this file read only so even i can't change username and password