Results 1 to 10 of 19

Hybrid View

  1. #1
    Join Date
    Jun 2016
    Location
    Suffolk VA
    Posts
    590
    Plugin Contributions
    0

    Default address in customer login

    We've been going along just fine for a long time, and all of a sudden, when a customer tries to log in, our email address is showing up in the login address field. I haven't changed anything in months, and I've never messed around with that part of the software at all. Nothing about our configuration has changed in over a year. I can't see why this change would have occurred and I don't see how to fix the problem. It has confused several of our customers who didn't understand why an address was suddenly popping up in that field instead of it being empty so they could put their own in.

    At the same time, when someone emails us using the contact form, our address is showing up as the return address for that person. If it's a customer, I can go back to their record and find their address. But sometimes it has been someone just inquiring about our products, and I have no way to respond to them because the email shows as having come from us. I have never touched the contact form code at all.

    It seems likely that these two things are related, since they seem to have appeared at about the same time, but I don't see what's causing either of them. Has anyone else run into these issues, and what did you do to fix it?

  2. #2
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: address in customer login

    To clarify: it's YOUR store's email address that is showing up on THEIR computers?

    Normal operation: it's normal for THEIR email address to get pre-populated into an email field if they've configured THEIR browser to remember personal information for filling out forms.

    But it shouldn't be putting YOUR email address in the form.


    Also, is this happening only on certain browsers? (Chrome, Safari, Edge, Firefox, Brave, etc)
    or only to "some" customers?
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #3
    Join Date
    Jun 2016
    Location
    Suffolk VA
    Posts
    590
    Plugin Contributions
    0

    Default Re: address in customer login

    Yes, it's our address that's showing up on their screen. I didn't realize that until yesterday. I thought it was only happening to me when I logged into the store as though I were a customer. But I had a call yesterday from someone who said she couldn't log in because the screen showed our address and wouldn't accept her password. I explained to her that she should just put her email address there instead, but I could see why she was confused. I called a customer who's also a personal friend and asked her to look at it, and sure enough, she was seeing the same thing. It's happening on Firefox, Edge and Chrome, and on at least one mobile browser. The person who was confused about how to proceed was using her phone, but I didn't remember to ask which browser she was using. If it's happening to three of us, I suspect it's happening to everyone, but I don't know that for certain at this point.

  4. #4
    Join Date
    Oct 2008
    Location
    Croatia
    Posts
    1,541
    Plugin Contributions
    19

    Default Re: address in customer login

    Any chance you'd share the URL? If you don't wanna share it here, you can PM me.

  5. #5
    Join Date
    Jun 2016
    Location
    Suffolk VA
    Posts
    590
    Plugin Contributions
    0

    Default Re: address in customer login

    No problem, it's newnaturalsonline.com. The address that's coming up is newnaturalsonline @ gmail. We can't use our domain address any more because AOL and Yahoo and some of the other email services have blocked it. When we moved from a shared server a couple of years ago to a dedicated server, our IP address changed and everybody blocked us. I managed to get the block removed on some of the email services but AOL and Yahoo won't even talk to you, much less help if you have a problem. So we had to start using a gmail address. But that was almost three years ago, so it's not related to what's going on now.
    Last edited by HeleneWallis; 21 Jan 2021 at 10:50 PM.

  6. #6
    Join Date
    Jan 2004
    Location
    N of San Antonio TX
    Posts
    9,106
    Plugin Contributions
    11

    Default Re: address in customer login

    While others are working on the main problem, I'll pass along that your store e-mail problems are probably a result of a lack of DMARC record for your site. All the other settings seem to be fine including SPF.

    Since everything else seems to be correct, have your host take a look at setting up the dmarc if you do not have WHM with your server.

    Attachment 19393

  7. #7
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: address in customer login

    Helene, does the problem persist if you (temporarily) switch to a different template? eg: rule out customizations unique to your current template or its language files.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  8. #8
    Join Date
    Jun 2016
    Location
    Suffolk VA
    Posts
    590
    Plugin Contributions
    0

    Default Re: address in customer login

    Quote Originally Posted by DrByte View Post
    Helene, does the problem persist if you (temporarily) switch to a different template? eg: rule out customizations unique to your current template or its language files.
    I haven't tried that, because our system is busy all the time. We ship all over the world, so we have orders coming in at all hours of the day and night, and I'm reluctant to do anything that would screw up the site's appearance. But the template customization was all done shortly after downloading and installing the package in 2016 and has not changed since then.

  9. #9
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: address in customer login

    (If this weren't happening on multiple screens in exactly the same way, I'd be more focused on a single template file, but the repetition suggests a deeper issue.)

    Okay, then this is how I would tackle the situation if I were investigating:

    Online:
    I'd test on a browser that has javascript disabled, even if only temporarily -- to see whether some javascript is injecting the email address (Whether via a widget you've added recently, or via something you didn't expect). Knowing that would help focus on specific kinds of files for first phase of fixing. But if you do find something in that area, if you don't know exactly why/who "did" that, then you'd still want to do a deep search/clean, as follows:

    Offline: https://docs.zen-cart.com/user/troub...bscure_issues/
    - I'd make a fresh copy of your site's files and database, to my PC. (Copy the files via secure FTP to a PC that has been checked for viruses etc.)
    - I'd compare all your site's files against the last "known good" copy of your site's files that you already had on your PC. The goal is to check for unauthorized alterations that have been made to server files.
    - I'd then compare all your site's files against originals for your Zen Cart version, looking for alterations/surprises.
    - I'd then compare your template-specific override files against "default" files, to see if there's anything template-specific that's been changed.

    One thing I'm wondering about is if a language file or template file has been changed to put your email address in place of something that should be driven by logic instead of hard-coded.
    But there could be other things that have been changed that are causing the output you've described.

    I'd also go looking for unexpected changes in the database. All tables should be inspected, especially the configuration table and even the tables that "rarely change".

    While I'm not immediately suspecting any "hack" or malicious activity, I wouldn't rule it out without a deep inspection. The steps above are the abbreviation of what I recommend for inspecting for hacks. In short: inspect by assuming the worst so that the inspection is utterly thorough, until you can fully prove that it isn't something rogue.

    It might just be some innocent side-effect of something a team member or hosting company employee was trying to do, which needs correcting.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  10. #10
    Join Date
    Jun 2009
    Location
    Sparta, TN
    Posts
    158
    Plugin Contributions
    0

    Default Re: address in customer login

    Quote Originally Posted by HeleneWallis View Post
    I haven't tried that, because our system is busy all the time. We ship all over the world, so we have orders coming in at all hours of the day and night, and I'm reluctant to do anything that would screw up the site's appearance. But the template customization was all done shortly after downloading and installing the package in 2016 and has not changed since then.
    That's great to have so much business. If you were to put the site down for maintenance (of course making sure your IP remains active), switch templates, and check the contact us page, you should be able to eliminate the template in just a couple of minutes before switching the template back and dropping out of maintenance.
    My store - closed 12/05/2023
    1.5.7d (upgraded from 1.5.7b), clone a template (cloned Responsive Classic Template), Sitemap XML v4.0, Square WebPay, PayPal Express Checkout, PHP Version: 7.4.29 (Zend: 3.4.0)

 

 

Similar Threads

  1. v139h Remove Default Email Address from Returning Customer Login
    By atomiksteve in forum General Questions
    Replies: 2
    Last Post: 15 Nov 2012, 04:22 AM
  2. v150 PayPal Canada won't accept Chinese address as customer's primary address
    By skyguard2000 in forum Built-in Shipping and Payment Modules
    Replies: 1
    Last Post: 11 May 2012, 03:13 AM
  3. Customer login and address not necessary.
    By thaidave in forum General Questions
    Replies: 4
    Last Post: 7 Dec 2010, 06:52 AM
  4. Customer Login time out error after adding confirm email address addon
    By abs007 in forum All Other Contributions/Addons
    Replies: 1
    Last Post: 29 Jan 2010, 08:02 PM
  5. Admin-Customer Last Login ip address lookup?
    By Justwade in forum General Questions
    Replies: 2
    Last Post: 20 Dec 2006, 08:01 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR