Help! Suddenly can't log in to the admin panel

When I tried logging in this moring, I got a message that I entered the wrong password. I requested a new one, but it still doesn't work.

I get a message telling me I entered wrong username/password, but I know that both are correct.

I added a new admin two days ago (for my summer help), can creating a new admin account mess up the other admin accounts?

Or might my extra help (whom I have no reason not to trust) have messd up MY login by accident?

I use v.3.8.4

My site is https://www.krusedull.net

Can anyone please help? I really don't know what to look for/do/check..

krusedull:

When I tried logging in this moring, I got a message that I entered the wrong password. I requested a new one, but it still doesn't work.

I get a message telling me I entered wrong username/password, but I know that both are correct.

I added a new admin two days ago (for my summer help), can creating a new admin account mess up the other admin accounts?

Or might my extra help (whom I have no reason not to trust) have messd up MY login by accident?

I use v.3.8.4

My site is https://www.krusedull.net

Can anyone please help? I really don't know what to look for/do/check..

I assume you mean V 138a
sounds like you've been hacked, Time to upgrade and follow the "recover from hacks" https://www.zen-cart.com/tutorials/index.php?article=118,
meanwhile to get back into your admin read this:

https://www.zen-cart.com/tutorials/index.php?article=2
:smile:

why not ask your new admin to login to their account for you, or you log in using their login info?

Thanks a lot for pinting me in the right direction! I'll see if that works.

I'm a little stressed out here - have a lot of orders that I'm supposed to sent ;)

Celtic:

why not ask your new admin to login to their account for you, or you log in using their login info?

She's not answering the phone, and she was setting her own password, so I don't know what it is. Feels a bit silly not making her password myself at the moment.

ok, so what about access to your databases through your webhosting control panel. Have you used phpMyAdmin before?

If you load phpMyAdmin and look in the 'Admin' table of your database you will find a list of the admin accounts.

Edit the details for the main account (or both) and paste this into the 'admin_pass' field...

16a5706a9bc1dfe5e2b7a8e16a31976a:8a

That is the encrypted version of the password 'admin' (without the quotes of course).

Save the details then try to log in with your admin username and the password of 'admin'.

Celtic: thanks a lot, I'll save your tip in case I need it at a later point.

I klicked Doals link, logged in to phpMyAdmin and ran the query suggested in ZenFAQ. Worked like a charm!

I also made one more admin account where I used another e-mail address, hopefully I can use that one if the same problem occurs again.

And yes, I will upgrade. Some day....

Thanks a lot :clap: :clap:

Now I can get some work done (at least tomorrow morning... :lamo: )

And yes, I will upgrade. Some day....
:no:

today!

They have been before They WILL be back!

http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

Donal:

:no:

today!

They have been before They WILL be back!

http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

I hate to say this but Donal is SO right! It's a pain in the backside, one that I'm in the process of dealing with now (if I ever get out of the forums), but the site I'm working with has been hacked twice just in the past 2 months. This last time, they changed our login IDs, passwords, and emails -- so even if we requested a new password the email we entered came up as being wrong and we couldn't get a new password. I was able to sneak in the backdoor (phpMyAdmin) and change things back in the database but there's so much more involved in trying to keep the hackers out. While you're in there (in phpMyAdmin), find the sessions table and click on Empty (not Drop) to make sure that the hackers don't have an open window to come back in after you upgrade and finish the recovery process.

Check your server files, too -- I found 4 folders had been added that contained massive amounts of spam content.