Encrypted Master Password support

[dbltoe]

With it's inclusion in the core, you have to dial down a little in the docs to find the page with the settings.

HTH

https://docs.zen-cart.com/user/runni...n_as_customer/

[marcopolo]

With it's inclusion in the core, you have to dial down a little in the docs to find the page with the settings.

HTH

https://docs.zen-cart.com/user/runni...n_as_customer/

It's not an option from what I see but would be a nice feature. It would give an extra layer of security to restrict master password use to certain ips only. As it is now if someone were to find out an a master password they can login to any account from anywhere.

[dbltoe]

It's not an option from what I see but would be a nice feature. It would give an extra layer of security to restrict master password use to certain ips only. As it is now if someone were to find out an a master password they can login to any account from anywhere.

You would have to make sure all admins had static IP addresses, never had to login from their mobile phone, and never used wifi while on the road.

Your best bet is to activate two-factor authentication. Discussion and directions can be found starting on page 43 of the Implementation Guide found in the docs folder's PDF file.

Great security without the "what's my IP now" problem.

[marcopolo]

You would have to make sure all admins had static IP addresses, never had to login from their mobile phone, and never used wifi while on the road.

Your best bet is to activate two-factor authentication. Discussion and directions can be found starting on page 43 of the Implementation Guide found in the docs folder's PDF file.

Great security without the "what's my IP now" problem.

In my particular case we do not access user accounts or admin control panel outside a set of ips so the ip restriction would be great for us. I will look at the two-factor authentication however would that work for signing into a users account using the admin password, not sure it would. That seems to only block admin control panel access which we already do. I'm just trying to restrict access to someone that would have found out a admins passwords and uses it to gain access to all accounts. Like I said just a feature not everyone would use it but I would guess many would.

[jimmie]

how do i turn off or stop it from dislaying ( Currently shopping for ) on every page i click it shows up?

[dbltoe]

That's a safety feature to remind you that you are technically logged in as a user.

If you are finished, log out and the notice will go away.

[jimmie]

every page i go to it is there and i have to click it off on every page

[lat9]

every page i go to it is there and i have to click it off on every page

I don't understand your statement; the message (unless modifications have been made) displays on the top of each page and there's nothing to click to "dismiss" the message.

[jimmie]

there is a litte X to close it out

[carlwhat]

there is a litte X to close it out

there are a couple of ways to handle it. conceivably you can add some javascript to automatically remove it out on pages that you do not want to see it.

there does not seem to be any notifiers in the message_stack class despite that class extending base.

barring that, you can change the following file:

includes/templates/YOUR_TEMPLATE/templates/tpl_message_stack_default.php

to something like:

<?php
    for ($i = 0, $n = sizeof($output); $i < $n; $i++) {
        if (!str_contains($output[$i]['text'], 'Currently shopping for')) {
            ?>
            <div <?= $output[$i]['params']; ?>><?= $output[$i]['text']; ?></div>
            <?php
        }
    }

hope that helps.

best.