Encrypted Master Password support

[dbltoe]

Figured it might be simpler to just dump the admin tables from both.
First

/*Navicat MySQL Data Transfer


Source Server         : All Pecans
Source Server Version : 50638
Source Host           : allpecans.com:3306
Source Database       : allpecan_155e


Target Server Type    : MYSQL
Target Server Version : 50638
File Encoding         : 65001


Date: 2018-04-18 16:01:58
*/


SET FOREIGN_KEY_CHECKS=0;


-- ----------------------------
-- Table structure for `admin`
-- ----------------------------
DROP TABLE IF EXISTS `admin`;
CREATE TABLE `admin` (
  `admin_id` int(11) NOT NULL AUTO_INCREMENT,
  `admin_name` varchar(32) NOT NULL DEFAULT '',
  `admin_email` varchar(96) NOT NULL DEFAULT '',
  `admin_profile` int(11) NOT NULL DEFAULT '0',
  `admin_pass` varchar(255) NOT NULL DEFAULT '',
  `prev_pass1` varchar(255) NOT NULL DEFAULT '',
  `prev_pass2` varchar(255) NOT NULL DEFAULT '',
  `prev_pass3` varchar(255) NOT NULL DEFAULT '',
  `pwd_last_change_date` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `reset_token` varchar(255) NOT NULL DEFAULT '',
  `last_modified` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_login_date` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_login_ip` varchar(45) NOT NULL DEFAULT '',
  `failed_logins` smallint(4) unsigned NOT NULL DEFAULT '0',
  `lockout_expires` int(11) NOT NULL DEFAULT '0',
  `last_failed_attempt` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_failed_ip` varchar(45) NOT NULL DEFAULT '',
  PRIMARY KEY (`admin_id`),
  KEY `idx_admin_name_zen` (`admin_name`),
  KEY `idx_admin_email_zen` (`admin_email`),
  KEY `idx_admin_profile_zen` (`admin_profile`)
) ENGINE=MyISAM AUTO_INCREMENT=6 DEFAULT CHARSET=utf8;


-- ----------------------------
-- Records of admin
-- ----------------------------
INSERT INTO `admin` VALUES ('1', 'abc', 'abc######################', '1', '$2y$10$B8UpQupLOvZmK8BFmC7DuO/0cjNbpdx3dY/9w.NXxo0J5J15KQ0H2', '$2y$10$gI5mdBSiJvxbqDJiGur8p.sZ4aiuxespkDFGx1swDwaiqjefWTxpS', '', '', '2018-04-09 18:07:34', '', '2018-04-09 13:06:24', '2018-04-18 19:20:24', '277.186.116.199', '0', '0', '2018-04-09 18:03:46', '277.186.116.199');
INSERT INTO `admin` VALUES ('2', 'def', 'def1@def', '1', '$2y$10$w9C8y6LEII/HAC04T0YQtOp98A7ZkR9Kq1CrbemzFodkvLZjqH5KG', '', '', '', '2018-04-11 17:37:36', '', '2018-01-10 02:17:12', '2018-04-17 21:29:08', '277.186.116.199', '0', '0', '2018-04-11 17:45:02', '277.186.116.199');
INSERT INTO `admin` VALUES ('5', 'def2', 'def2@def', '1', '$2y$10$TCJyG/C8b2HRZ/v5Rh7BJOOQ.ZJGq2OkratPqNDO8OkfQvGurIA4e', '', '', '', '2018-04-17 21:29:57', '', '2018-04-17 21:29:57', '0001-01-01 00:00:00', '', '0', '0', '0001-01-01 00:00:00', '');

Second

/*Navicat MySQL Data Transfer


Source Server         : Hare Do 1.5.5a
Source Server Version : 50638
Source Host           : haredo.com:3306
Source Database       : haremark_zc155a


Target Server Type    : MYSQL
Target Server Version : 50638
File Encoding         : 65001


Date: 2018-04-18 16:02:40
*/


SET FOREIGN_KEY_CHECKS=0;


-- ----------------------------
-- Table structure for `admin`
-- ----------------------------
DROP TABLE IF EXISTS `admin`;
CREATE TABLE `admin` (
  `admin_id` int(11) NOT NULL AUTO_INCREMENT,
  `admin_name` varchar(32) NOT NULL DEFAULT '',
  `admin_email` varchar(96) NOT NULL DEFAULT '',
  `admin_profile` int(11) NOT NULL DEFAULT '0',
  `admin_pass` varchar(255) NOT NULL DEFAULT '',
  `prev_pass1` varchar(255) NOT NULL DEFAULT '',
  `prev_pass2` varchar(255) NOT NULL DEFAULT '',
  `prev_pass3` varchar(255) NOT NULL DEFAULT '',
  `pwd_last_change_date` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `reset_token` varchar(255) NOT NULL DEFAULT '',
  `last_modified` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_login_date` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_login_ip` varchar(45) NOT NULL DEFAULT '',
  `failed_logins` smallint(4) unsigned NOT NULL DEFAULT '0',
  `lockout_expires` int(11) NOT NULL DEFAULT '0',
  `last_failed_attempt` datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
  `last_failed_ip` varchar(45) NOT NULL DEFAULT '',
  PRIMARY KEY (`admin_id`),
  KEY `idx_admin_name_zen` (`admin_name`),
  KEY `idx_admin_email_zen` (`admin_email`),
  KEY `idx_admin_profile_zen` (`admin_profile`)
) ENGINE=MyISAM AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;


-- ----------------------------
-- Records of admin
-- ----------------------------
INSERT INTO `admin` VALUES ('1', 'abc', 'abc######################', '1', '$2y$10$Q4o3IUBb/v529vE293IuH.t80/4VO9z9G0b/0wst7hExBvE6KQXpq', '$2y$10$na.WW.SXuQGRtZ.Tmsr4UuhS24d2Duo6k5jBewzHMbOWujd8kCuIS', '', '', '2018-03-14 11:26:51', '', '2018-03-14 07:21:43', '2018-04-16 21:02:55', '277.186.116.199, '0', '0', '2018-03-14 07:04:51', '277.186.116.199');
INSERT INTO `admin` VALUES ('2', 'def', 'def@def', '1', '$2y$10$GCZDdv8i6GhYBQ0vsXaIc.78S9Y2hN6PcuyEtLQeIFpXEAYEimrju', '$2y$10$5nubU6jQaOzAu9enLsNgZud1W4ArE6IFB9vX/MR4Tw3WiRRztmDyG', '', '', '2018-04-11 12:59:22', '', '2018-04-11 12:59:22', '2018-04-17 21:30:57', '277.186.116.199', '0', '0', '0000-00-00 00:00:00', '');
INSERT INTO `admin` VALUES ('4', 'def2', 'def@def', '1', '$2y$10$qlOEcnQwV5AOtynLaW6SK.cAOxeMt8TQpKlkRBnazRMzFNcT3vMaO', '', '', '', '2018-04-17 21:31:32', '', '2018-04-17 21:31:32', '0001-01-01 00:00:00', '', '0', '0', '0001-01-01 00:00:00', '');

[lat9]

@dbltoe, I'm thinking that the issue is due to the "Single Admin ID" being disabled but I need more time to test that theory. For right now, a work-around might be to set both Single Admin ID and Admin Profile ID to 1.

[dbltoe]

Tried that and it didn't work on either site. While not affecting the login/order placing of the other admins, it still did not allow the ID 1 to perform either task.

[lat9]

What version of EMP?

[dbltoe]

Both confirmed to be using 2.3.0 with UltraCompare (store-bought winmerge).

[lat9]

The issue that @dbltoe's clients are/were having is that the admin's entered password (upon registration or change) is sanitized, so that an entered password of vou&1elrHj gets modified to vou&1elrHj prior to generating the password hash. When the admin enters vou&1elrHj on the storefront, the password is disallowed for this reason.

That's why the admin-entered password was not being accepted during an EMP "Place Order" process.

I'll get this issue logged in GitHub, corrected and an updated release of the plugin available.

[lat9]

I'm happy to report that EMP v2.3.1 integrates successfully with zc156 and later! It helps that there are no core-file overwrites.

[lat9]

I'm happy to report that EMP v2.3.1 integrates successfully with zc156 and later! It helps that there are no core-file overwrites.

... and I see (duh) that I never released that version; it's just been submitted to the Zen Cart plugins for review.

[lat9]

... and I see (duh) that I never released that version; it's just been submitted to the Zen Cart plugins for review.

EMP, v2.3.1, is now available for download: https://www.zen-cart.com/downloads.php?do=file&id=94

[kenaniah]

This does not appear to be working with v1.5.6a. I have a fresh install with Numinix Google Analytics Bada883 and USU-3.0.0-beta2 (Ultimate SEO). When loaded the admin appears to work fine in the config and customer area. It will let you log in as the customer... takes you to the login screen.... but cannot get there from the regular website. But on the regular site the account functions for the customer do not work... cannot login, logout, unsubscribe, etc. Even after I remove the files and run the uninstall script these are not working.