Encrypted Master Password support

[stagebrace]

Please use this forum for "Encrypted Master Password" support.

[gearheadniko]

Please use this forum for "Encrypted Master Password" support.

Hello, I have merged my header_php.php with your header_php.php
and uploaded to my site. When I select login I get a blank page. If I simply upload your header_php.php same thing. In the last forum scrap had the same problem. It seems that around line 65 there is a real change in the code. Here is my header_php.php if you have time to look at it.

MODERATOR -- code removed

The only mods that I know of to this is that I use dual pricing and at line 50 and 90 customers_wholesale is added.
Thanks for your attention to this.
Niko
marinemagik. com.

[stagebrace]

I wonder if the Encrypted Master Password works (on your server) in an install with no other modules installed. Would you consider making a temporary test store then install the Encrypted Master Password mod? Then if it works, install the wholesale mod and see if the Password mod works.

I will try and support the mod no mater what the results are.

[gearheadniko]

I wonder if the Encrypted Master Password works (on your server) in an install with no other modules installed. Would you consider making a temporary test store then install the Encrypted Master Password mod? Then if it works, install the wholesale mod and see if the Password mod works.

I will try and support the mod no mater what the results are.

Thanks for the feedback stagebrace, but that is over my head. I really appreciate your efforts.
Niko

[SPembleton]

Will v1.2 work with ZenCart v1.5?

[SPembleton]

I just tested this out on a test store, and it works fine.

[dbltoe]

The fact that it works doesn't necessarily mean it works.

It might function as wanted but does it function properly for PCI compliance?

There are specific changes to that file in 1.5.0 and I'm not sure overwriting it with the one in the mod is not breaking something we don't see.

I'll look into this and maybe stagebrace already has something in the works.

[dbltoe]

For version 1.5.0 of Zen Cart:

1. If you have already uploaded the header_php.php file for the mod, replace it with the header_php.php that came with 1.5.0. This will make sure things work while you're editing the file.
2. Download (or open from an original 1.5.0 on your computer) the current (1.5.0 version of) includes/modules/pages/login/header_php.php and open it a proper editor.

Find around line 61

if (!zen_validate_password($password, $check_customer->fields['customers_password'])) {

and replace it with

// *** start Encrypted Master Password by stagebrace ***
$get_admin_query = "SELECT admin_id, admin_pass
FROM " . TABLE_ADMIN . "
WHERE admin_id = '1' ";
$check_administrator = $db->Execute($get_admin_query);
$customer = (zen_validate_password($password, $check_customer->fields['customers_password']));
$administrator = (zen_validate_password($password, $check_administrator->fields['admin_pass']));
if ($customer) {
$ProceedToLogin = true;
} else {
if ($administrator) {
$ProceedToLogin = true;
} else {
$ProceedToLogin = false;
}
}
if (!($ProceedToLogin)) {
// *** end Encrypted Master Password by stagebrace ***

Save the file and upload it back to your site.
Now you will have all the latest changes PLUS the advantage of Encrypted Master Password.

There weren't a lot of differences and no PCI probs but the newer version did address one security point and PayPal buttons.

[dbltoe]

I've submitted the change to Free Software Add Ons as EMP version 1.5.

[SPembleton]

I've submitted the change to Free Software Add Ons as EMP version 1.5.

Thanks. Can you let us know when it is available?