Is a Permanent Login (Auto-Login) Possible?

[crazy_chris]

hey,

how could it be possible to let users "stay logged in on this computer" (auto / permanent login)?

thx

[BlindSide]

Sure, you just need to set a cookie, and configure the Zen Cart login to look for it.

http://us2.php.net/manual/en/features.cookies.php

Then take a look at...

• [STORE_ROOT]/includes/modules/pages/login/header.php
• [STORE_ROOT]/includes/modules/create_account.php

[crazy_chris]

okay, that works really nice.
but since it's so easy to modify cookies, how to make it safe?
store the password as md5-string in the cookie?

[BlindSide]

The cookie should definitely have the PW encoded.

[crazy_chris]

sorry, but WHY wouldn't you take md5-encryption for the customers password?

zen_validate_password doesn't help any, because that function deals with the unencrypted password as value.
in the cookie i have an md5... and the function zen_encrypt_password always produces a different string...

how would you suggest to compare the md5-pw to the one in the db?

[crazy_chris]

sorry, my mistake.

of course i can store the password from the db in the cookie and have not to deal with this extendet encryption method

[hliang]

I installed this mod successfully. I would like to add an additional feature on the login header. If customer logged in already, i would like to display customer's first and last name follow by [Logout]. This is very similar to Welcome message on the main page, except for i would like to have it display on the header file. The benefit of it is to let customer know that his session is still active. How do i accomplish this?

In file, /includes/languages/english/MYTEMPLATE/header.php
I changed define('HEADER_TITLE_LOGOFF', '[Log Out]');
to
define('HEADER_TITLE_LOGOFF', %s[Log Out]');

The display result shows the same. What is the actual variable to represent current user's first and last name?

[nagelkruid]

I installed this mod successfully. I would like to add an additional feature on the login header. If customer logged in already, i would like to display customer's first and last name follow by [Logout]. This is very similar to Welcome message on the main page, except for i would like to have it display on the header file. The benefit of it is to let customer know that his session is still active. How do i accomplish this?

In file, /includes/languages/english/MYTEMPLATE/header.php
I changed define('HEADER_TITLE_LOGOFF', '[Log Out]');
to
define('HEADER_TITLE_LOGOFF', %s[Log Out]');

The display result shows the same. What is the actual variable to represent current user's first and last name?

$_SESSION['customer_first_name']
$_SESSION['customer_last_name']

[jsquared]

Hello.

I installed 2.01 both on a live 1.5.6A instance and a development 1.5.7. On both, the login does not seem to hold across sessions despite checking the box.
The things I changed were the secret of course, and the cookie duration to 365 days. I thought changing the cookie duration may be the problem but this does not seem to effect things. Is there a good way to troubleshoot this?

Thanks for the plugin.

[lat9]

Hello.

I installed 2.01 both on a live 1.5.6A instance and a development 1.5.7. On both, the login does not seem to hold across sessions despite checking the box.
The things I changed were the secret of course, and the cookie duration to 365 days. I thought changing the cookie duration may be the problem but this does not seem to effect things. Is there a good way to troubleshoot this?

Thanks for the plugin.

What version of PHP is in use? You can view the cookie settings using your browser's 'Developer Tools' (F12 on Windows for Firefox, Chrome and Edge) to check that the samesite attribute is being properly set.