New Zenner
- Join Date:
- Jul 2017
- Location:
- West Midlands, UK
- Posts:
- 51
- Plugin Contributions:
- 1
Customer struggling to log in after resetting password
Hi,
We have recently been notified by a customer that they had reset their password but were still unable to log in.
I have looked into it and believe there could be a bug/issue with the passwords generated by Zen Cart.
We noticed that it’s hard to tell the difference between zero and lowercase/uppercase letter O. For example - 0 O o – can be easily misidentified, particularly when letters and numbers are generated in a random sequence.
When I tested the password reset feature the following password was generated by the system: qm0KEq
The zero in the example above is easily confused with an uppercase O.
It may be worth restricting the use of zeros and the letter O in Zen Cart generated passwords.
To help customers the language file /includes/languages/english/lang.password_forgotten.php should also be updated to make it clear that passwords are case sensitive.
It would be much appreciated if someone could look into these issues.
Many thanks
Richard