Forums / Addon Admin Tools / Encrypted Master Password support

Encrypted Master Password support

Views: 53,602

Results 181 to 200 of 210
29 Aug 2019, 5:55 PM
#181
rixstix avatar

rixstix

Totally Zenned

Join Date:
Aug 2009
Location:
North Idaho, USA
Posts:
2,015
Plugin Contributions:
0

Encrypted Master Password support

Uhm, it's an older version but was working with my antique zc 1.5.4 without error before the server move/update. We're still chasing a few other hiccups tossed into the fray by the server move/update.

Argggg. 2.0.0 ducks for cover

Rick
RixStix (dot) com
aka: ChainWeavers (dot) com

30 Aug 2019, 7:36 PM
#182
rixstix avatar

rixstix

Totally Zenned

Join Date:
Aug 2009
Location:
North Idaho, USA
Posts:
2,015
Plugin Contributions:
0

Re: Encrypted Master Password support

lat9:

That makes sense (the DIR_FS_LOGS setting), since you'd indicated that PayPal logs were being created.

Try using those updated enable_error_logging.php files.

Copied the 156c error_logging files. Still no functionality. Same white page. Same error.

I'm assuming it is a checkbox in the new server settings (that might jump out at you as being obvious) since the only change made is moving to a CentOS 7 server from whatever CentOS server that was EOL.

Rick
RixStix (dot) com
aka: ChainWeavers (dot) com

30 Aug 2019, 7:43 PM
#183
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,116
Plugin Contributions:
56

Re: Encrypted Master Password support

@RixStix, the issue that you're experiencing was corrected in EMP 2.2.1 (released May 5, 2016).

30 Aug 2019, 8:00 PM
#184
rixstix avatar

rixstix

Totally Zenned

Join Date:
Aug 2009
Location:
North Idaho, USA
Posts:
2,015
Plugin Contributions:
0

Re: Encrypted Master Password support

lat9:

@RixStix, the issue that you're experiencing was corrected in EMP 2.2.1 (released May 5, 2016).

TNX Cindy

Rick
RixStix (dot) com
aka: ChainWeavers (dot) com

30 Jul 2020, 12:25 PM
#185
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,725
Plugin Contributions:
56

Re: Encrypted Master Password support

1.5.7 users: remember you will want to remove the EMP files as part of your upgrade, or you'll be surprised to see two Place Order buttons in your customers sidebar!

deleted: includes/auto_loaders/config.emp_customers_button.php

deleted: includes/classes/observers/class.emp_admin_customers_observer.php

deleted: includes/functions/extra_functions/init_emp_configuration.php

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

30 Jul 2020, 2:01 PM
#186
carlwhat avatar

carlwhat

zennedOut

Join Date:
Nov 2005
Location:
los angeles
Posts:
2,972
Plugin Contributions:
8

Re: Encrypted Master Password support

swguy:

1.5.7 users: remember you will want to remove the EMP files as part of your upgrade, or you'll be surprised to see two Place Order buttons in your customers sidebar!

deleted: includes/auto_loaders/config.emp_customers_button.php

deleted: includes/classes/observers/class.emp_admin_customers_observer.php

deleted: includes/functions/extra_functions/init_emp_configuration.php

don't forget all of these files are in YOUR_ADMIN.

author of square Webpay, now with Apple Pay and Google Pay.
mXworks
donations: venmo or paypal accepted.
premium consistent excellent support. available for hire.

18 Feb 2021, 7:04 PM
#187
sblantonmmp avatar

sblantonmmp

New Zenner

Join Date:
Sep 2020
Location:
North Carolina
Posts:
5
Plugin Contributions:
0

Re: Encrypted Master Password support

Hello,

We have this installed on ZC 1.5.6c with EMP version2.4.2. Following the instructions, we have set the Admin profile in the config setting. We don't see a button for placing orders as indicated in the instructions. I am not able to login using a customer email address and my password. Do I need the Admin Login as customer plugin as well or is this one stand alone?

Thanks!

18 Feb 2021, 7:26 PM
#188
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,116
Plugin Contributions:
56

Re: Encrypted Master Password support

SblantonMMP:

Hello,

We have this installed on ZC 1.5.6c with EMP version2.4.2. Following the instructions, we have set the Admin profile in the config setting. We don't see a button for placing orders as indicated in the instructions. I am not able to login using a customer email address and my password. Do I need the Admin Login as customer plugin as well or is this one stand alone?

Thanks!
This plugin is stand-alone. Check to see that your admin's customers.php includes the NOTIFY_ADMIN_CUSTOMERS_MENU_BUTTONS notification (that's what EMP 'binds to' to add the Place Order button).

You can also go to the storefront login page, enter a customer's email address and your admin login password to place an order for the customer.

18 Feb 2021, 8:18 PM
#189
sblantonmmp avatar

sblantonmmp

New Zenner

Join Date:
Sep 2020
Location:
North Carolina
Posts:
5
Plugin Contributions:
0

Re: Encrypted Master Password support

lat9:

This plugin is stand-alone. Check to see that your admin's customers.php includes the NOTIFY_ADMIN_CUSTOMERS_MENU_BUTTONS notification (that's what EMP 'binds to' to add the Place Order button).

You can also go to the storefront login page, enter a customer's email address and your admin login password to place an order for the customer.

Thanks! I will check for the NOTIFY. I did try to use a customer's email address with my admin password and it did not work. I got the standard username/password error.

12 Nov 2022, 12:00 AM
#190
marcopolo avatar

marcopolo

Totally Zenned

Join Date:
May 2008
Location:
United States
Posts:
522
Plugin Contributions:
2

Re: Encrypted Master Password support

Can login as admin for this mode be restricted to a set of ip address only? So for example if trying to login using the master password from an IP address not listed in a setting config then it will simply not work?

marcopolo
Zen Cart 2.2.2 | PHP 8.5.11 | MariaDB 10.11.14

12 Nov 2022, 12:15 AM
#191
dbltoe avatar

dbltoe

Totally Zenned

Join Date:
Jan 2004
Location:
N of San Antonio TX
Posts:
9,857
Plugin Contributions:
18

Re: Encrypted Master Password support

With it's inclusion in the core, you have to dial down a little in the docs to find the page with the settings.

HTH

https://docs.zen-cart.com/user/running/login_as_customer/

Need a hand with Zen Cart? Hire the team at myZenCartZone.com for upgrades, repairs, and custom plugins.
Zen Cart Certified hosting at myZenCartHost.com

13 Nov 2022, 12:26 PM
#192
marcopolo avatar

marcopolo

Totally Zenned

Join Date:
May 2008
Location:
United States
Posts:
522
Plugin Contributions:
2

Re: Encrypted Master Password support

dbltoe:

With it's inclusion in the core, you have to dial down a little in the docs to find the page with the settings.

HTH

https://docs.zen-cart.com/user/running/login_as_customer/

It's not an option from what I see but would be a nice feature. It would give an extra layer of security to restrict master password use to certain ips only. As it is now if someone were to find out an a master password they can login to any account from anywhere.

marcopolo
Zen Cart 2.2.2 | PHP 8.5.11 | MariaDB 10.11.14

13 Nov 2022, 1:48 PM
#193
dbltoe avatar

dbltoe

Totally Zenned

Join Date:
Jan 2004
Location:
N of San Antonio TX
Posts:
9,857
Plugin Contributions:
18

Re: Encrypted Master Password support

marcopolo:

It's not an option from what I see but would be a nice feature. It would give an extra layer of security to restrict master password use to certain ips only. As it is now if someone were to find out an a master password they can login to any account from anywhere.You would have to make sure all admins had static IP addresses, never had to login from their mobile phone, and never used wifi while on the road.

Your best bet is to activate two-factor authentication. Discussion and directions can be found starting on page 43 of the Implementation Guide found in the docs folder's PDF file.

Great security without the "what's my IP now" problem.

Need a hand with Zen Cart? Hire the team at myZenCartZone.com for upgrades, repairs, and custom plugins.
Zen Cart Certified hosting at myZenCartHost.com

13 Nov 2022, 1:56 PM
#194
marcopolo avatar

marcopolo

Totally Zenned

Join Date:
May 2008
Location:
United States
Posts:
522
Plugin Contributions:
2

Re: Encrypted Master Password support

dbltoe:

You would have to make sure all admins had static IP addresses, never had to login from their mobile phone, and never used wifi while on the road.

Your best bet is to activate two-factor authentication. Discussion and directions can be found starting on page 43 of the Implementation Guide found in the docs folder's PDF file.

Great security without the "what's my IP now" problem.

In my particular case we do not access user accounts or admin control panel outside a set of ips so the ip restriction would be great for us. I will look at the two-factor authentication however would that work for signing into a users account using the admin password, not sure it would. That seems to only block admin control panel access which we already do. I'm just trying to restrict access to someone that would have found out a admins passwords and uses it to gain access to all accounts. Like I said just a feature not everyone would use it but I would guess many would.

marcopolo
Zen Cart 2.2.2 | PHP 8.5.11 | MariaDB 10.11.14

25 Apr 2023, 12:30 AM
#195
jimmie avatar

jimmie

Totally Zenned

Join Date:
Jan 2013
Location:
New Port Richey, Florida
Posts:
971
Plugin Contributions:
0

Re: Encrypted Master Password support

how do i turn off or stop it from dislaying ( Currently shopping for ) on every page i click it shows up?

25 Apr 2023, 1:32 AM
#196
dbltoe avatar

dbltoe

Totally Zenned

Join Date:
Jan 2004
Location:
N of San Antonio TX
Posts:
9,857
Plugin Contributions:
18

Re: Encrypted Master Password support

That's a safety feature to remind you that you are technically logged in as a user.

If you are finished, log out and the notice will go away.

Need a hand with Zen Cart? Hire the team at myZenCartZone.com for upgrades, repairs, and custom plugins.
Zen Cart Certified hosting at myZenCartHost.com

25 Apr 2023, 11:17 AM
#197
jimmie avatar

jimmie

Totally Zenned

Join Date:
Jan 2013
Location:
New Port Richey, Florida
Posts:
971
Plugin Contributions:
0

Re: Encrypted Master Password support

every page i go to it is there and i have to click it off on every page

25 Apr 2023, 11:39 AM
#198
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,116
Plugin Contributions:
56

Re: Encrypted Master Password support

jimmie:

every page i go to it is there and i have to click it off on every page
I don't understand your statement; the message (unless modifications have been made) displays on the top of each page and there's nothing to click to "dismiss" the message.

25 Apr 2023, 12:09 PM
#199
jimmie avatar

jimmie

Totally Zenned

Join Date:
Jan 2013
Location:
New Port Richey, Florida
Posts:
971
Plugin Contributions:
0

Re: Encrypted Master Password support

there is a litte X to close it out

25 Apr 2023, 2:33 PM
#200
carlwhat avatar

carlwhat

zennedOut

Join Date:
Nov 2005
Location:
los angeles
Posts:
2,972
Plugin Contributions:
8

Re: Encrypted Master Password support

jimmie:

there is a litte X to close it out

there are a couple of ways to handle it. conceivably you can add some javascript to automatically remove it out on pages that you do not want to see it.

there does not seem to be any notifiers in the message_stack class despite that class extending base.

barring that, you can change the following file:

includes/templates/YOUR_TEMPLATE/templates/tpl_message_stack_default.php

to something like:

<?php
    for ($i = 0, $n = sizeof($output); $i < $n; $i++) {
        if (!str_contains($output[$i]['text'], 'Currently shopping for')) {
            ?>
            <div <?= $output[$i]['params']; ?>><?= $output[$i]['text']; ?></div>
            <?php
        }
    }

hope that helps.

best.

author of square Webpay, now with Apple Pay and Google Pay.
mXworks
donations: venmo or paypal accepted.
premium consistent excellent support. available for hire.