Serious Login Issues. Please help!

Yesterday I attempted to login in to my ZenCart site after about a month of not logging in. I entered my un and pw at which time it asked me to reset my password. Fine. I kept getting the error that my password did not meet the requirements (though it did). Could not figure out what was going on so tried from a fresh browser. Same thing.

I then received MULTIPLE emails that my account login privileges were suspended for at least 30 minutes due to multiple login attempts. Well yeah that was me trying to login!

Anyhow, I wait an hour, open a fresh browser and attempt the process over again. No luck. Request a password reset. When I attempt to use the reset password nothing happens, the login box just refreshes. Get several more emails about excessive login attempts. Now I am getting frustrated, but go eat dinner and wait 2 hours before trying to login with reset password. Same issue, login box just refreshes and I continue to get emails about logins.

Go to sleep. Wake up this morning and try to login again. Same issue!!! Request password reset again. Same issue.

How the heck can I log in to my account?? This is becoming very critical as I desperately need to login in today. How long does one need to actually wait to attempt to login again? And is there any work around? I have cpanel and ftp access to my site.

Thanks so much for any help with this incredibly frustrating issue.

You need to provide some additional information - look at the posting tips at the top of the page when responding

Sorry, I should have done that to begin with. Unfortunately since I cannot login I am not sure what version of Zen Cart I am running, but my best guess is 1.3.8

PHP version is 5.4.22

MySQL Version 5.5.42-cll

site url is hedgelists.com

Anyone experienced this login issue before or have any ideas on a workaround?

best guess is 1.3.8

PHP version is 5.4.22
I really doubt that you are on V1.3.8 as it should not run correctly or at all on php 5.4.22

You did not state if this is a fresh install or upgraded install

Use phpmyadmin and check the table project_version

Thank you Kobra. You may very well be right. I have opened phpmyadmin for this site but am unsure how to check the table project_version.

This is not a fresh install. I have had the site for several years and the last update was around a year ago give or take. However, this is the first time I have had login issues and no changes were made to the site since before my last successful login around a month ago.

jgnaman:

I am not sure what version of Zen Cart I am running, but my best guess is 1.3.8

We are all hoping that your best guess is incorrect because 1.3.8 has several well known vulnerabilities, and until we know better, my 1st thought is that you've been hacked. (My second thought is how did you manage to hold out for so long??)

jgnaman:

PHP version is 5.4.22

Another possibility is that your host has 'recently(?)' performed this PHP upgrade on the server, and it is this that is causing your current problem.

Many hosts will allow you to set the PHP version to be used via your cPanel, so if you really are running 1.3.8 (or similar old version) you may be able to fix your issue(s) by setting this back to use PHP 5.2 (I think that's the compatible one).

Cheers
RodG

Thanks for your reply Rob. Luckily I was wrong about 1.3.8. After searching my email I found the thread with the developer that last upgraded my site. It appears we went from 1.3.9h to 1.5.1. There have been no updates since that time.

jgnaman:

Thanks for your reply Rob. Luckily I was wrong about 1.3.8. After searching my email I found the thread with the developer that last upgraded my site. It appears we went from 1.3.9h to 1.5.1. There have been no updates since that time.

FWIW, I went to your site, created an account, logged in and out several times without any problems.

Is it only the admin logins that you are having a problem with? If so, please check out the Zencart FAQ files that will give you information in how to manually reset the admin password as this may be the only viable option for you. You/we can worry about why the current password/logins are failing at a later stage.. Your first priority is to get a login so that you can reset the password (and thereby preventing access to someone else that may have managed to change it somehow or other).

Cheers
RodG

Yes it is only for the admin. I have gone to this FAQ thread and followed the applicable steps to no avail: https://www.zen-cart.com/content.php?126-i-cant-login-to-the-admin-after-installing-zen-cart

I just attempted to login in again after 5 or 6 hours of no attempts. I still get the following warning email: Important Notice:
There have been multiple unsuccessful login attempts to
your administrative account. For your protection and for system security,
after 6 attempts the account will be locked for a minimum of 30 minutes...

If you could point me to the FAQ that shows a workaround I would much appreciate it. I could not find one, just the FAQ linked above.

http://www.zen-cart.com/content.php?44

Thank you. I will try that now.

Woohoo! That worked. After following the instructions linked above I was successfully able to login and bring up the change password prompt and this time was able to change password and get to admin. Thank you to all of you for your help. Much appreciated!

jgnaman:

Woohoo! That worked. After following the instructions linked above I was successfully able to login and bring up the change password prompt and this time was able to change password and get to admin. Thank you to all of you for your help. Much appreciated!

Thanks for the update that this worked for you.

Do keep a close eye on things though because if you find yourself locked out again it could be an indication that something more sinister is going on. I can't/won't say that your original problem was caused because you really was entering an invalid/incorrect password (caps lock, "1" instead of "l", etc, etc, bit for the sake of sanity it may be wise to assume that was the case.

I'n sure most of us have done this at some stage, else there'd be no reson for the FAQ on how to reset. :-)

Cheers
RodG