Encrypted Master Password support

16 May 2011, 01:45

#1

stagebrace

Totally Zenned

Join Date:: Jan 2005
Posts:: 985
Plugin Contributions:: 0

Encrypted Master Password support

Please use this forum for "Encrypted Master Password" support.

16 May 2011, 12:07

#2

gearheadniko

New Zenner

Join Date:: Oct 2009
Posts:: 63
Plugin Contributions:: 0

Re: Encrypted Master Password support

stagebrace:
Please use this forum for "Encrypted Master Password" support.

Hello, I have merged my header_php.php with your header_php.php
and uploaded to my site. When I select login I get a blank page. If I simply upload your header_php.php same thing. In the last forum scrap had the same problem. It seems that around line 65 there is a real change in the code. Here is my header_php.php if you have time to look at it.

MODERATOR -- code removed

The only mods that I know of to this is that I use dual pricing and at line 50 and 90 customers_wholesale is added.
Thanks for your attention to this.
Niko
marinemagik. com.

16 May 2011, 15:44

#3

stagebrace

Totally Zenned

Join Date:: Jan 2005
Posts:: 985
Plugin Contributions:: 0

Re: Encrypted Master Password support

I wonder if the Encrypted Master Password works (on your server) in an install with no other modules installed. Would you consider making a temporary test store then install the Encrypted Master Password mod? Then if it works, install the wholesale mod and see if the Password mod works.

I will try and support the mod no mater what the results are.

16 May 2011, 21:12

#4

gearheadniko

New Zenner

Join Date:: Oct 2009
Posts:: 63
Plugin Contributions:: 0

Re: Encrypted Master Password support

stagebrace:
I wonder if the Encrypted Master Password works (on your server) in an install with no other modules installed. Would you consider making a temporary test store then install the Encrypted Master Password mod? Then if it works, install the wholesale mod and see if the Password mod works.

I will try and support the mod no mater what the results are.

Thanks for the feedback stagebrace, but that is over my head. I really appreciate your efforts.
Niko

13 Jan 2012, 15:19

#5

spembleton

Zen Follower

Join Date:: Jun 2010
Posts:: 232
Plugin Contributions:: 0

Re: Encrypted Master Password support

Will v1.2 work with ZenCart v1.5?

14 Jan 2012, 13:08

#6

spembleton

Zen Follower

Join Date:: Jun 2010
Posts:: 232
Plugin Contributions:: 0

Re: Encrypted Master Password support

I just tested this out on a test store, and it works fine.

20 Jan 2012, 02:49

#7

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

The fact that it works doesn't necessarily mean it works.:P

It might function as wanted but does it function properly for PCI compliance?

There are specific changes to that file in 1.5.0 and I'm not sure overwriting it with the one in the mod is not breaking something we don't see.

I'll look into this and maybe stagebrace already has something in the works.

20 Jan 2012, 03:15

#8

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

For version 1.5.0 of Zen Cart:

If you have already uploaded the header_php.php file for the mod, replace it with the header_php.php that came with 1.5.0. This will make sure things work while you're editing the file.
Download (or open from an original 1.5.0 on your computer) the current (1.5.0 version of) includes/modules/pages/login/header_php.php and open it a proper editor.

Find around line 61

if (!zen_validate_password($password, $check_customer->fields['customers_password'])) {

and replace it with

// *** start Encrypted Master Password by stagebrace ***
$get_admin_query = "SELECT admin_id, admin_pass
FROM " . TABLE_ADMIN . "
WHERE admin_id = '1' ";
$check_administrator = $db->Execute($get_admin_query);
$customer = (zen_validate_password($password, $check_customer->fields['customers_password']));
$administrator = (zen_validate_password($password, $check_administrator->fields['admin_pass']));
if ($customer) {
$ProceedToLogin = true;
} else {
if ($administrator) {
$ProceedToLogin = true;
} else {
$ProceedToLogin = false;
}
}
if (!($ProceedToLogin)) {
// *** end Encrypted Master Password by stagebrace ***

Save the file and upload it back to your site.
Now you will have all the latest changes PLUS the advantage of Encrypted Master Password.

There weren't a lot of differences and no PCI probs but the newer version did address one security point and PayPal buttons.

20 Jan 2012, 03:49

#9

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

I've submitted the change to Free Software Add Ons as EMP version 1.5.

20 Jan 2012, 17:19

#10

spembleton

Zen Follower

Join Date:: Jun 2010
Posts:: 232
Plugin Contributions:: 0

Re: Encrypted Master Password support

dbltoe:
I've submitted the change to Free Software Add Ons as EMP version 1.5.

Thanks. Can you let us know when it is available?

21 Jan 2012, 22:10

#11

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

You don't have to wait.
If you follow the instructions in post #8, you'll be good to go.:bigups:

23 Jan 2012, 00:14

#12

discoverytdi

Totally Zenned

Join Date:: May 2011
Posts:: 562
Plugin Contributions:: 0

Re: Encrypted Master Password support

dbltoe:
You don't have to wait.
If you follow the instructions in post #8, you'll be good to go.:bigups:

It's listed thanks dbltoe winmerge here I come

03 Feb 2012, 19:20

#13

brihan

New Zenner

Join Date:: Jan 2011
Posts:: 19
Plugin Contributions:: 0

Re: Encrypted Master Password support

Hi,

I want to add Encrypted Master Password to my 1.3.9h but I see in the contributions download it jumps from 1.3.8 to 1.5.

Will the 1.3.8 version work on my 1.3.9h?

Thank you.

Encrypted Master Password allows the stores administrator to login to customers account with their administrator password.
Upgraded for Zen Cart v1.3.8 - This is a core file modification.

.
Author: Dennis Sayer
Version: 1.2
Zen Cart™ Version: v1.3.8Update added on Dec 01 2007
PHP 5.3 Compatible?: Unknown or N/A
Download Now!
File size: 5341 bytes

--------------------------------------------------------------------------------

03 Feb 2012, 21:47

#14

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

Again, post #8 comes into play.
If you have loaded a clean fresh 1.3.9h, just add the code in post #8 to your /includes/modules/pages/login/header_php.php

Note that the portion in red above was left off the link in post #8.

04 Feb 2012, 01:38

#15

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

Thanks to Kim for fixing my error in post #8:hug:

25 Aug 2012, 01:42

#16

bad_kitty_studios

New Zenner

Join Date:: Aug 2011
Posts:: 20
Plugin Contributions:: 0

Re: Encrypted Master Password support

I am trying to use Hidden Wholesale plugin with the Master Password addon. The problem I am running into is when I login with the master password the account type defaults to Retail. So all of the products that are hidden from Retail customers won't show up even though I am logged into a Wholesale account. Is there a code fix or adjustment for this addon to make it see the Wholesale levels of the Dual Pricing addon?

29 Aug 2012, 07:05

#17

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

Are you using both the dual pricing AND hidden mods? What version of Zen Cart?
Have you used something like winmerge to compare the header_php.php files in the mods?

11 Jan 2013, 15:35

#18

zola

New Zenner

Join Date:: Mar 2009
Posts:: 7
Plugin Contributions:: 0

Re: Encrypted Master Password support

This is a feature request.

If you add your admin/user password check to header.php.php in includes/modules/pages/account_password, it allows you to not only log in as the customer, it allows you to change their password. It's really handy because some customers get very confused, and it's much faster to log into their account and change the password than to add a whole module to the admin panel. Would you consider adding this additional page to the module?

27 Feb 2013, 09:40

#19

savvonet

New Zenner

Join Date:: Aug 2010
Posts:: 10
Plugin Contributions:: 0

Re: Encrypted Master Password support

I tryed to add admin\user password check on header_php.php in includes/modules/pages/account_password, and it works fine, but with one bug:

If a customer (logged with normal mail and password) or an admin (logged with mail and master password) try to change account password, in old password field there is no longer a check, any word will be passed as "old password".

02 Mar 2013, 16:09

#20

dbltoe

Totally Zenned

Join Date:: Jan 2004
Posts:: 9,707
Plugin Contributions:: 6

Re: Encrypted Master Password support

Zola:
This is a feature request.

If you add your admin/user password check to header.php.php in includes/modules/pages/account_password, it allows you to not only log in as the customer, it allows you to change their password. It's really handy because some customers get very confused, and it's much faster to log into their account and change the password than to add a whole module to the admin panel. Would you consider adding this additional page to the module?

The beauty of open source is that you can "massage" at will.
Personally, when someone forgets their password, I use the built-in forgotten password feature to send them a new one by email. I could see where a user might request something they can remember better than the ZC-generated one but I advise them to use a more secure password.