Login no longer working, credentials are correct

[leslehman]

So, all of a sudden, we cant login, worked for past 2 years no problem, spoke with hosting company, no issues they say, checked credentials, they are correct. When trying to login, I get no error or anything, it just doesnt do anything, I tried using a worng password, and it does come up and say, incorrect password, but with proper credentials, it just sits and we dont get in. I can rule out computer issues becasue I tried it on 3 different ones in 3 dofferent locations. Anyone know of a bug or issue like this?

Also, while i am asking, periodically an email address within our configuration panel has changed. I know sounds strange. its the same everytime, so I thought maybe a default thing or something. Nothing maliciaous has happened and not all of the emails are changed just a couple wierd I know. It goes from our email addrss to "RichardBuyA######################" Anyone heard of this?

Les

[kobra]

What version of ZenCart
Is it sexurity patched if older?
You might be hacked

[leslehman]

Its two years ol, cant get in to tell you exactly what version. If I am hacked, what are my options? I have all of the files backed up, is there anyway into the admin area? Can i open files from the source files, or is teh admin the only way?

LEs

[yoz8225]

I have the same problem.... all of a sudden I cannot get into the ADMIN... the system says user/ pass may be incorrect, when I know for a fact that I didn't change either. I also tried clicking on the "Resend Password" link on the admin login screen... the system e-mailed me a new password but It still will not let me in. HELP!!!

[kobra]

leslehman,

Consider that you have been hacked due to your email changing issue
Code does not change these things by itself

Follow ALL, and I mean ALL steps

http://www.zen-cart.com/wiki/index.p...ing_From_Hacks

[leslehman]

Thanks, I will do "ALL" of these, but how do I get into the admin to make and check stuff in there?

Les

[kobra]

In your host provided phpmyadmin > select the DB and the sql tab

Check your tables for any prefix and adjust this patch if needed

DELETE FROM admin WHERE admin_name = 'Admin'; 
INSERT INTO admin (admin_name, admin_email, admin_pass, admin_level) 
VALUES ('Admin', 'admin@localhost', '351683ea4e19efe34874b501fdbf9792:9b', 1);

You can then use
user = Admin
pass= admin

Change it immediately

[black68gtx]

I just re-installed my backup version 1.3.9h all is working except with this re-installed I can not access my admin area. I do not believe these backed files were hacked.
Checking my configure.php the passward is correct. does the above work as well to reset the user and pass? Do I access the tables in the db, if so which table or file am I looking for?

[kobra]

black68gtx,

Just check if you have a prefix adjust if necessary and run from the sql tab

[black68gtx]

What do you mean a prefix adjust? I have the admin table open with the browse tab: this is what I see
SELECT *
FROM `admin`
LIMIT 0 , 30

the sql tab shows:
SELECT * FROM `admin` WHERE 1