Encrypted Master Password support

[Zola]

This is a feature request.

If you add your admin/user password check to header.php.php in includes/modules/pages/account_password, it allows you to not only log in as the customer, it allows you to change their password. It's really handy because some customers get very confused, and it's much faster to log into their account and change the password than to add a whole module to the admin panel. Would you consider adding this additional page to the module?

[Savvonet]

I tryed to add admin\user password check on header_php.php in includes/modules/pages/account_password, and it works fine, but with one bug:

If a customer (logged with normal mail and password) or an admin (logged with mail and master password) try to change account password, in old password field there is no longer a check, any word will be passed as "old password".

[dbltoe]

I tryed to add admin\user password check on header_php.php in includes/modules/pages/account_password, and it works fine, but with one bug:

If a customer (logged with normal mail and password) or an admin (logged with mail and master password) try to change account password, in old password field there is no longer a check, any word will be passed as "old password".

This may be the main reason the originator did not include master password in this manner.
As stated in my earlier post, I think the forgotten password is the better option. Even if I personally add someone to a site while talking on the phone, my last step is to use the forgotten password function to send them a new password.

[dbltoe]

This is a feature request.

If you add your admin/user password check to header.php.php in includes/modules/pages/account_password, it allows you to not only log in as the customer, it allows you to change their password. It's really handy because some customers get very confused, and it's much faster to log into their account and change the password than to add a whole module to the admin panel. Would you consider adding this additional page to the module?

The beauty of open source is that you can "massage" at will.
Personally, when someone forgets their password, I use the built-in forgotten password feature to send them a new one by email. I could see where a user might request something they can remember better than the ZC-generated one but I advise them to use a more secure password.

[newtozc32]

The beauty of open source is that you can "massage" at will.
Personally, when someone forgets their password, I use the built-in forgotten password feature to send them a new one by email. I could see where a user might request something they can remember better than the ZC-generated one but I advise them to use a more secure password.

Where is this forgotten password feature you speak of?

[swguy]

index.php?main_page=password_forgotten

There is a link to this page on the login page (index.php?main_page=login) right under the email/password fields where existing customers log in.

[lat9]

I just took a peek at this plugin and would like to propose a couple of modifications for the most recent version:

1. Allow either a single admin user or all users in an admin group (or both) to have the customer-login access
2. Add a session variable if the current session is an admin-login to allow an admin-login to have potentially different behavior

I'd be happy to implement these changes; I just didn't want to step on anyone's feet.

[lankeeyankee]

I just took a peek at this plugin and would like to propose a couple of modifications for the most recent version:

1. Allow either a single admin user or all users in an admin group (or both) to have the customer-login access
2. Add a session variable if the current session is an admin-login to allow an admin-login to have potentially different behavior

I'd be happy to implement these changes; I just didn't want to step on anyone's feet.

Yes, and yes. Both would be great features. Right now I had to hack the code to allow for 2 admin users to be able to log in. I would really like to see these changes implemented. Thanks!

[lat9]

Yes, and yes. Both would be great features. Right now I had to hack the code to allow for 2 admin users to be able to log in. I would really like to see these changes implemented. Thanks!

Done; v1.5.1 of the plugin has been submitted to the Plugins area ...