Encrypted Master Password support

admin>My Store/Master Password
I don't know where this came from if it not suppose to be there. I did a complete new install finally imported in old DB.
I will try the admin PW.

Thanks again,

Larry

lat9:

Larry, I don't understand what you mean when you say you used your "Master Password". This plugin's name is misleading; it enables you to use ***your Zen Cart admin password ***to sign into any customer's account.

Regarding the missing "Place Order" button, I suggest you re-review the plugin's installation; I've got this version installed on a "vanilla" Zen Cart 1.5.5e site and can turn on/off the plugin's two configuration values and receive that button whenever the single admin ID matches my admin ID and/or when my admin profile is in the list of enabled profiles.

Yes, that configuration setting has nothing to do with Encrypted Master Password.

lat9:

Yes, that configuration setting has nothing to do with Encrypted Master Password.

Yup. When I use the correct PW works great.
I would bet that PW came from Numinix FECA that came in when I imported 150 DB. Guess I need to clean up DB.
Now I got to head over and pick-up OPC 1.4. My god girl you fix'em faster than I can install the fixes.

Thanks so very much,

Larry

Yes, I remember now that the Numinix FEC module did include some form of "Master Password".

Please, though, do not refer to me as girl; I find it demeaning.

lat9:

I've just submitted v2.3.0 of Encrypted Master Password to the plugin's for review; once approved, that version can be downloaded from here.

Note: This version drops support for Zen Cart versions prior to 1.5.5. If your store uses an older version of Zen Cart, please use an earlier version of EMP!

This version contains the corrections for the missing 'Place Order' button when the admin-profile feature is disabled and the inclusion of the customer's ID in the admin-activity-log record created if an EMP admin creates an order on a customer's behalf.
Now available for download from the Zen Cart plugins: https://www.zen-cart.com/downloads.php?do=file&id=94

ZC 1.5.5f

Just loaded EncryptedMasterPassword, newest version, when I click on "Place Order" My Home Screen opens but only the background image and the buttons at the top left "Home" "Log Out" show up nothing else.

wsworx:

ZC 1.5.5f

Just loaded EncryptedMasterPassword, newest version, when I click on "Place Order" My Home Screen opens but only the background image and the buttons at the top left "Home" "Log Out" show up nothing else.
Sounds like there's a partial white-page, implying an error of some sort. Is a myDEBUG*.log file created in the /logs directory when you click that?

I deleted the program, cleaned a couple of issues up and now everything is working good.

Thank You

Here's one I can't figure out and no debug files are generated.

Two separate sites with nearly same modules (one uses OPC, the other doesn't) (one uses multi-ship, other doesn't). Same server of course, same PHP.

Both sites are set to zero (0) for Single Admin ID and one (1) for Admin Profile ID. Both have two admins in profile 1. Both have owner as Admin ID 1 and myself as ID 2.

Neither site will allow Admin ID 1 to login for a customer or place an order for a customer.

Both sites allow Admin ID 2 to login for a customer or place an order for a customer.

Both sites will allow a newly created user with profile 1 to login for a customer or place an order for a customer.

One site was started pre-1.5.0 and upgraded to 1.5.5f

Other was started at 1.5.5e and upgraded to 1.5.5f

Of course, I could just blow away Admin ID 1 and re-insert the owner; but I would like to have a better, lasting solution.

Ideas?

Could you provide a screenshot of one of the site's phpMyAdmin, with the admin table displayed (obfuscating admin-names and emails)?

The code that drives the EMP login is pretty simple for the admin-profile-id processing, gathering all admin IDs that are in the given profile.

Figured it might be simpler to just dump the admin tables from both.
First```
/*Navicat MySQL Data Transfer

Source Server : All Pecans
Source Server Version : 50638
Source Host : allpecans.com:3306
Source Database : allpecan_155e

Target Server Type : MYSQL
Target Server Version : 50638
File Encoding : 65001

Date: 2018-04-18 16:01:58
*/

SET FOREIGN_KEY_CHECKS=0;

-- Table structure for admin

DROP TABLE IF EXISTS admin;
CREATE TABLE admin (
admin_id int(11) NOT NULL AUTO_INCREMENT,
admin_name varchar(32) NOT NULL DEFAULT '',
admin_email varchar(96) NOT NULL DEFAULT '',
admin_profile int(11) NOT NULL DEFAULT '0',
admin_pass varchar(255) NOT NULL DEFAULT '',
prev_pass1 varchar(255) NOT NULL DEFAULT '',
prev_pass2 varchar(255) NOT NULL DEFAULT '',
prev_pass3 varchar(255) NOT NULL DEFAULT '',
pwd_last_change_date datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
reset_token varchar(255) NOT NULL DEFAULT '',
last_modified datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_login_date datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_login_ip varchar(45) NOT NULL DEFAULT '',
failed_logins smallint(4) unsigned NOT NULL DEFAULT '0',
lockout_expires int(11) NOT NULL DEFAULT '0',
last_failed_attempt datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_failed_ip varchar(45) NOT NULL DEFAULT '',
PRIMARY KEY (admin_id),
KEY idx_admin_name_zen (admin_name),
KEY idx_admin_email_zen (admin_email),
KEY idx_admin_profile_zen (admin_profile)
) ENGINE=MyISAM AUTO_INCREMENT=6 DEFAULT CHARSET=utf8;

-- Records of admin

INSERT INTO admin VALUES ('1', 'abc', 'abc######################', '1', '$2y$10$B8UpQupLOvZmK8BFmC7DuO/0cjNbpdx3dY/9w.NXxo0J5J15KQ0H2', '$2y$10$gI5mdBSiJvxbqDJiGur8p.sZ4aiuxespkDFGx1swDwaiqjefWTxpS', '', '', '2018-04-09 18:07:34', '', '2018-04-09 13:06:24', '2018-04-18 19:20:24', '277.186.116.199', '0', '0', '2018-04-09 18:03:46', '277.186.116.199');
INSERT INTO admin VALUES ('2', 'def', 'def1@def', '1', '$2y$10$w9C8y6LEII/HAC04T0YQtOp98A7ZkR9Kq1CrbemzFodkvLZjqH5KG', '', '', '', '2018-04-11 17:37:36', '', '2018-01-10 02:17:12', '2018-04-17 21:29:08', '277.186.116.199', '0', '0', '2018-04-11 17:45:02', '277.186.116.199');
INSERT INTO admin VALUES ('5', 'def2', 'def2@def', '1', '$2y$10$TCJyG/C8b2HRZ/v5Rh7BJOOQ.ZJGq2OkratPqNDO8OkfQvGurIA4e', '', '', '', '2018-04-17 21:29:57', '', '2018-04-17 21:29:57', '0001-01-01 00:00:00', '', '0', '0', '0001-01-01 00:00:00', '');
Second
/*Navicat MySQL Data Transfer

Source Server : Hare Do 1.5.5a
Source Server Version : 50638
Source Host : haredo.com:3306
Source Database : haremark_zc155a

Target Server Type : MYSQL
Target Server Version : 50638
File Encoding : 65001

Date: 2018-04-18 16:02:40
*/

SET FOREIGN_KEY_CHECKS=0;

-- Table structure for admin

DROP TABLE IF EXISTS admin;
CREATE TABLE admin (
admin_id int(11) NOT NULL AUTO_INCREMENT,
admin_name varchar(32) NOT NULL DEFAULT '',
admin_email varchar(96) NOT NULL DEFAULT '',
admin_profile int(11) NOT NULL DEFAULT '0',
admin_pass varchar(255) NOT NULL DEFAULT '',
prev_pass1 varchar(255) NOT NULL DEFAULT '',
prev_pass2 varchar(255) NOT NULL DEFAULT '',
prev_pass3 varchar(255) NOT NULL DEFAULT '',
pwd_last_change_date datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
reset_token varchar(255) NOT NULL DEFAULT '',
last_modified datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_login_date datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_login_ip varchar(45) NOT NULL DEFAULT '',
failed_logins smallint(4) unsigned NOT NULL DEFAULT '0',
lockout_expires int(11) NOT NULL DEFAULT '0',
last_failed_attempt datetime NOT NULL DEFAULT '0001-01-01 00:00:00',
last_failed_ip varchar(45) NOT NULL DEFAULT '',
PRIMARY KEY (admin_id),
KEY idx_admin_name_zen (admin_name),
KEY idx_admin_email_zen (admin_email),
KEY idx_admin_profile_zen (admin_profile)
) ENGINE=MyISAM AUTO_INCREMENT=5 DEFAULT CHARSET=utf8;

-- Records of admin

INSERT INTO admin VALUES ('1', 'abc', 'abc######################', '1', '$2y$10$Q4o3IUBb/v529vE293IuH.t80/4VO9z9G0b/0wst7hExBvE6KQXpq', '$2y$10$na.WW.SXuQGRtZ.Tmsr4UuhS24d2Duo6k5jBewzHMbOWujd8kCuIS', '', '', '2018-03-14 11:26:51', '', '2018-03-14 07:21:43', '2018-04-16 21:02:55', '277.186.116.199, '0', '0', '2018-03-14 07:04:51', '277.186.116.199');
INSERT INTO admin VALUES ('2', 'def', 'def@def', '1', '$2y$10$GCZDdv8i6GhYBQ0vsXaIc.78S9Y2hN6PcuyEtLQeIFpXEAYEimrju', '$2y$10$5nubU6jQaOzAu9enLsNgZud1W4ArE6IFB9vX/MR4Tw3WiRRztmDyG', '', '', '2018-04-11 12:59:22', '', '2018-04-11 12:59:22', '2018-04-17 21:30:57', '277.186.116.199', '0', '0', '0000-00-00 00:00:00', '');
INSERT INTO admin VALUES ('4', 'def2', 'def@def', '1', '$2y$10$qlOEcnQwV5AOtynLaW6SK.cAOxeMt8TQpKlkRBnazRMzFNcT3vMaO', '', '', '', '2018-04-17 21:31:32', '', '2018-04-17 21:31:32', '0001-01-01 00:00:00', '', '0', '0', '0001-01-01 00:00:00', '');

@dbltoe, I'm thinking that the issue is due to the "Single Admin ID" being disabled but I need more time to test that theory. For right now, a work-around might be to set ***both ***Single Admin ID and Admin Profile ID to 1.

Tried that and it didn't work on either site. While not affecting the login/order placing of the other admins, it still did not allow the ID 1 to perform either task.

What version of EMP?

Both confirmed to be using 2.3.0 with UltraCompare (store-bought winmerge).

The issue that @dbltoe's clients are/were having is that the admin's entered password (upon registration or change) is sanitized, so that an entered password of vou&1elrHj gets modified to vou&1elrHj prior to generating the password hash. When the admin enters vou&1elrHj on the storefront, the password is disallowed for this reason.

That's why the admin-entered password was not being accepted during an EMP "Place Order" process.

I'll get this issue logged in GitHub, corrected and an updated release of the plugin available.

I'm happy to report that EMP v2.3.1 integrates successfully with zc156 and later! It helps that there are no core-file overwrites. :P

lat9:

I'm happy to report that EMP v2.3.1 integrates successfully with zc156 and later! It helps that there are no core-file overwrites. :P
... and I see (duh) that I never released that version; it's just been submitted to the Zen Cart plugins for review.:blush:

lat9:

... and I see (duh) that I never released that version; it's just been submitted to the Zen Cart plugins for review.:blush:
EMP, v2.3.1, is now available for download: https://www.zen-cart.com/downloads.php?do=file&id=94

This does not appear to be working with v1.5.6a. I have a fresh install with Numinix Google Analytics Bada883 and USU-3.0.0-beta2 (Ultimate SEO). When loaded the admin appears to work fine in the config and customer area. It will let you log in as the customer... takes you to the login screen.... but cannot get there from the regular website. But on the regular site the account functions for the customer do not work... cannot login, logout, unsubscribe, etc. Even after I remove the files and run the uninstall script these are not working. :(