Encrypted Master Password support

[hubert]

@hubert, the change requires some code-merging since EMP v1.6.0 uses an older Zen Cart version as its code-base.

First, remove all remnants of EMP v2.1.0 from your store. The changes vary significantly from v1.6.0 to v2.1.0 of this plugin.

Now, using the EMP v1.6.0 zip-file:

1. Merge the single block of code that adds the "Place Order" button into /YOUR_ADMIN/customers.php.
2. Merge the single block of code within /includes/modules/pages/login/header_php.php. This isn't going to be pretty, since the login code changed significantly from Zen Cart v1.5.1 (which is the code-base used by the plugin) to v1.5.4 (which your store is using). You'll need to review the code structure in the two versions of the module to determine where to place the EMP-specific code.
3. Once the merges are complete, the remaining code (all EMP-specific) can simply be copied to your store's file system.

1 is done
2- In /includes/modules/pages/login/header_php.php there is not only one modification but several, some by you lat9 and some by stagebrace. Even if I downloaded the 1.6 version the comment says

//-bof-Encrypted Master Password by stagebrace *** 1/1
//- Start modifications by lat9:
//-bof-a-v1.7.0

and that is the only the fist one. So I added all of them as it seems to me its the code I'm looking for to get the automatic login.

3- I understood that I had to add the remaining files and modifications from 2.1. What I did.

Now when I click the Place Order button it gets me to a login page saying Whoops your session has expired.

Sorry. I'm stuck. I need a bit more help.

[lat9]

@hubert, for step#3 you should be using the files from the 1.6.0 version, not v2.1.0.

[hubert]

@hubert, for step#3 you should be using the files from the 1.6.0 version, not v2.1.0.

OK, OK, I just understood, so it was just "install 1.6 instead of 2.1". LOL

Thanks a lot for your patience.

It works, it's great. I just noticed something.
Choose customer X, click Place Order, you get a new tab acting as X.
Don't close your tab, just go back to the customer list tab.
Choose customer Y, click Place Order, you get a new tab acting as X.

If you do not logout X I can't act as Y.
Just curiosity, would it be possible to have a customer by tab, acting as X in a tab and at the same time as Y in another tab ?

[hubert]

Next step...

As I'm planning to give a restricted access to the one who is going to take orders on the phone using EMP... I just noticed that I have no way to give access to the Place Order button in an Admin Profile.

I've setup a "Cashier" admin account, given access to the customers page, but when I log as the Cashier the Place Order button disappears...

How can I add the option in the admin profiles settings ?

[hubert]

Following...

I've dug a bit : admin profiles gives access to admin pages, since EMP has not its own page (its settings are in Configuration->My Store), seems impossible to give access to EMP.
More, even if you/we move the EMP settings to a separate page, that would makes us give access to this settings page which is not what I'm looking for.

There must be a trick, but the problem seems to me to give access to customer side page from a admin profile system which is built only to give access to admin side pages.

The thing I don't understand is how the profile system can sort out a button in a page...

[hubert]

Here is the trick which is not really one, I was looking too far :
in /admin/customers.php

around line 1212

if (!$emp_result->EOF && ($_SESSION['admin_id'] == EMP_LOGIN_ADMIN_ID || $emp_result->fields['admin_profile'] == EMP_LOGIN_ADMIN_PROFILE_ID) ) {  /*v1.7.0c*/

should be

if (!$emp_result->EOF && ( $_SESSION['admin_id'] == EMP_LOGIN_ADMIN_ID || in_array ($emp_result->fields['admin_profile'], explode (',', EMP_LOGIN_ADMIN_PROFILE_ID)) )) {

And now my cashier has the button and everything is fine.

[lat9]

OK, OK, I just understood, so it was just "install 1.6 instead of 2.1". LOL

Thanks a lot for your patience.

It works, it's great. I just noticed something.
Choose customer X, click Place Order, you get a new tab acting as X.
Don't close your tab, just go back to the customer list tab.
Choose customer Y, click Place Order, you get a new tab acting as X.

If you do not logout X I can't act as Y.
Just curiosity, would it be possible to have a customer by tab, acting as X in a tab and at the same time as Y in another tab ?

That's not going to be possible, since the session-cookie is stored once-per-site in the browser. If you have multiple browsers, you could have Customer X in Firefox, Customer Y in Chrome, ...

Next step...

As I'm planning to give a restricted access to the one who is going to take orders on the phone using EMP... I just noticed that I have no way to give access to the Place Order button in an Admin Profile.

I've setup a "Cashier" admin account, given access to the customers page, but when I log as the Cashier the Place Order button disappears...

How can I add the option in the admin profiles settings ?

You've discovered that the multiple admin-profiles settings were introduced post EMP v1.6. The change that you posted brings your Customers->Customers handling up to the current EMP version.

[lat9]

I've uploaded v2.2.0 of EMP to the Zen Cart Plugins for review. This version adds support for Zen Cart v1.5.5 and drops support for Zen Cart versions prior to v1.5.3, with the following changes:

- Update to use Zen Cart 1.5.5 release (03-29-2016) for the core-file changes
- Add Dutch language constants
- Use new Customers->Customers notifier
- Remove support for Zen Cart versions prior to 1.5.3
- Restructure the plugin's distribution zip-file
- Remove OSH-updated-by code; it can be installed separately if the functionality is desired.

Note: If you're still using a version of Zen Cart prior to v1.5.3 for your store, please use an earlier version of EMP.

[lat9]

v2.2.0 is now available for download.