Is there really a reason for "current password" when resetting?

Who uses a public computer for shopping?

And I'll add that there's a re-thinking and re-coding of the checkout flow happening for v1.6.0 which treats guest checkout as a first-class-citizen and not a plugin.

s_mack:

Who uses a public computer for shopping?
Maybe you and I don't. But that's a weak argument for removing all safeguards.

I agree that the current workflow is inconvenient. Kudos for giving it meaningful thought and engaging in discussion about ways to improve it, as well as discussing risks of certain approaches. I respect that highly.

I just chimed in to give clarification to some of the inner workings. I'm not wanting to hijack any of the discussion here.

DrByte:

And I'll add that there's a re-thinking and re-coding of the checkout flow happening for v1.6.0 which treats guest checkout as a first-class-citizen and not a plugin.

Excellent! Thank you!

lhungil:

Thank You! This was the setting I could not seem to remember last night while browsing on my phone. Not a perfect solution, but should (hopefully) result in a temporary account being created for Paypal Express Checkout orders (and deleted after checkout). If I am remembering correctly this setting also causes the "new account" email to not be sent.

But if you do want an account automatically created for these customers... Or to provide them an option to create a new account (with the PayPal information and order history)... Looks like there will be some planning and work to be done...

Agreed. Feels like some scenarios are not accounted for (or possibly not working).

Again, thank you rbarbour and DivaVovals for chiming in!

It's this setting:

Express Checkout: Automatic Account Creation
If a visitor is not an existing customer, a Zen Cart account is created for them. Would you like make it a permanent account and send them an email containing their login information?
NOTE: Permanent accounts are auto-created if the customer purchases downloads or gift certificates, regardless of this setting.

I typically turn this setting off because as I have experienced with client's, this creates a whole set of issues for my client's.. Some issues include customer's NOT automatically getting the password information for this auto-generated account consistently..

drbyte:

and i'll add that there's a re-thinking and re-coding of the checkout flow happening for v1.6.0 which treats guest checkout as a first-class-citizen and not a plugin.

bravo!!!

I've had some time to look a little closer. First off, my settings: "Express Checkout: Automatic Account Creation" is set to "YES", "Express Checkout: Select Cheapest Shipping Automatically" is set to "NO" and "Express Checkout: Skip Payment Page" is set to "YES".

I just did a test purchase using a sandbox account freshly created. One thing I notice is, despite the setting the Payment Page is NOT skipped. I have no choices there and the only two things I can do is a) change address and b) continue. I do not have gift certs or coupons installed. So this was kind of an unnecessary step that the customer has to go through. Is this normal? Or caused by something I did, perhaps?

Upon completion I see I received two emails, "Welcome to [store]" and "Order Confirmation No. [X]". I don't know how I got confused before, and I'm sorry for the false report, but I DO get a password in this email. I could have sworn that wasn't the case. That sort of resolves the whole purpose of posting here, but it brings up a question... SHOULD this password be sent by plain text like this? What about all this "layers of security" talk that came up when I suggested removing a password confirmation that only exists after logging in? :) But mostly, does this not fly in the face of the default text which tells the customer quite clearly that it is a "temporary" account that is removed simply by clicking "log off"? That's why I changed the text.

I'll investigate now how it works without auto-account creation and see if that makes more sense to me.

ps. I'm just reporting here, not looking to extend the discussion. My ?s above are rhetorical.

s_mack:

"Express Checkout: Skip Payment Page" is set to "YES".

I just did a test purchase using a sandbox account freshly created. One thing I notice is, despite the setting the Payment Page is NOT skipped. I have no choices there and the only two things I can do is a) change address and b) continue. I do not have gift certs or coupons installed. So this was kind of an unnecessary step that the customer has to go through. Is this normal?
No, it's not normal. When set to be skipped it should skip unless something specific to that page/step is still required (the common ones, which you already mentioned, are coupons/GVs).

S_mack,

What files are in includes/modules/pages/checkout_payment?

header_php.php and jscript_main.php