Quote Originally Posted by rwoody View Post
I've just been contacted by a customer where I had installed FEC v 1.51 to include the checkout w/o account. He received a call from one of his retail customer's that they found that they could login to their account with only their email address. No password was needed!!

Of course I immediately thought it was a cookie, but it's not. Anyone that has previously registered to the site can merely enter their email address and hit login and they are in!!! (Password field left blank).

Now I've disabled the entire FEC and it is still happening, so something somewhere in the checkout modifications has really messed this up and I have no clue where to look.

I need to fix this ASAP as you can imagine and I don't know where to start. Can someone give me a clue what to look for?

Really stressed here on this one.
I'm still trying to figure this out. Has anyone ever seen this issue before and if not, can someone give me a clue other than the tpl_login_default.php file that would be the issue? I've replaced that file with a fresh one from the install. There were no edits to that file. We do have super orders installed and I used the appropriate replacement files from the package there. I am just at a loss on this to figure out what is causing the issue.

Any suggestions would be greatly appreciated and desperately needed.