Is a Permanent Login (Auto-Login) Possible?

hey,

how could it be possible to let users "stay logged in on this computer" (auto / permanent login)?

thx

Sure, you just need to set a cookie, and configure the Zen Cart login to look for it.

http://us2.php.net/manual/en/features.cookies.php

Then take a look at...- [STORE_ROOT]/includes/modules/pages/login/header.php

• [STORE_ROOT]/includes/modules/create_account.php

okay, that works really nice.
but since it's so easy to modify cookies, how to make it safe?
store the password as md5-string in the cookie?

The cookie should definitely have the PW encoded.

sorry, but WHY wouldn't you take md5-encryption for the customers password?

zen_validate_password doesn't help any, because that function deals with the unencrypted password as value.
in the cookie i have an md5... and the function zen_encrypt_password always produces a different string...

how would you suggest to compare the md5-pw to the one in the db?

sorry, my mistake.

of course i can store the password from the db in the cookie and have not to deal with this extendet encryption method :P

Is this explained (i.e. a step-by-step how-to with code examples) anywhere for people like me - non-programmers but willing to have ago?

I'll rephrase that - does anyone have a step-by-step guide as how to incorporate this in ZC? Or better still, a contribution? :wink2:

okay, i'll write a brief explanation of that.
but tomorrow... :P

hi.1. first of all, add a checkbox to your login-form called something like "permLogin".

2. **edit the file "/includes/modules/pages/login/header_php.php"
**if the login is ok, zencart will proceed to the beyond line 57 and does all the stuff around line 70. just after this we hook in. put that code there:

• if (!empty($REQUEST["permLogin"])) {
  ** unset($c);
  _ $c[] = $SESSION['customer_id'];
  ** $c[] = $SESSION['customer_default_address_id'];
  ** $c[] = $SESSION['customers_authorization'];
  ** $c[] = $SESSION['customer_first_name'];
  ** $c[] = $SESSION['customer_last_name'];
  ** $c[] = $SESSION['customer_country_id'];
  ** $c[] = $SESSION['customer_zone_id'];
  ** $c[] = $check_customer->fields['customers_password'];

_ $c_str = implode("~~~", $c);
_ setcookie("zencart_cookie_permlogin", $c_str, time()+36000000);
}
*
this will store all the relevant information in the cookie.

3. **edit the file "/includes/modules/pages/index/header_php.php"
**if you start your zencart, this page will be loaded. here we check if the login is set and if, then we login automatically.
at the very top of that file, just after "$zco_notifier..." add this code:
_

• if (substr_count($COOKIE["zencart_cookie_permlogin"], "~~~") > 1) {
  ** if (empty($SESSION['customer_id'])) {
  *_* $c = explode("~~~", $_COOKIE["zencart_cookie_permlogin"]);

$q = "SELECT customers_password FROM " . TABLE_CUSTOMERS . " WHERE customers_id=" . $c[0];
$r = $db->Execute($q);

$pw_cookie = zen_db_prepare_input($c[7]);
$pw_zencart = $r->fields['customers_password'];

if ($pw_cookie == $pw_zencart) {
_ $SESSION['customer_id'] = $c[0];
** $SESSION['customer_default_address_id'] = $c[1];
** $SESSION['customers_authorization'] = $c[2];
** $SESSION['customer_first_name'] = $c[3];
** $SESSION['customer_last_name'] = $c[4];
** $SESSION['customer_country_id'] = $c[5];
** $SESSION['customer_zone_id'] = $c[6];
** $SESSION['cart']->restore_contents();
** }
** }
}
*_
_
Thats pretty much it
:smile:

Thankyou - much appreciated.

Ok, I have done a few searches, but I couldn't find anything definitive.

add a checkbox to your login-form called something like "permLogin".

How would I go about adding a checkbox. From your instructions I can definately do the rest, but the checkbox stumps me.

Oh and thank you very much for the instructions, I love that my customers can be logged in all of the time.

Pat

hey, no problem!

it's a template file you should first copy into your own template-directory.

1. copy the file "includes/templates/template_default/templates/tpl_login_default.php" to "your_template_dir/templates/tpl_login_default.php"
   _
2. in this file the login box is around line 50. just there add the checkbox with a code like that:
   "<input id="permLogin" name="permLogin" type="checkbox" checked> stay logged in"

Good stuff, crazy_chris. :thumbsup:

Hi crazy_chris, I just wanted to stop by and thank you for this.

I haven't got it working yet, (I got the tick box and the cookie imbeds it'self, but it does not log me back in again) but I will play around with it and I am sure I will be able to figure it out. It is likely I just put the code in the wrong spot, so I will look at the logic of the statements.

Again, thanks

Pat

Hmm - I get this error ```
1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1
in:
[SELECT customers_password FROM zen_customers WHERE customers_id=]

And the code I have copied and pasted from above and placed exactly where recommended in includes/modules/pages/login/header_php.php is```
if (substr_count($_COOKIE["zencart_cookie_permlogin"], "~~~") > 1) {
		if (empty($_SESSION['customer_id'])) {
			$c = explode("~~~", $_COOKIE["zencart_cookie_permlogin"]);

			$q = "SELECT customers_password FROM " . TABLE_CUSTOMERS . " WHERE customers_id=" . $c[0];
			$r = $db->Execute($q);

			$pw_cookie = zen_db_prepare_input($c[7]);
			$pw_zencart = $r->fields['customers_password'];

			if ($pw_cookie == $pw_zencart) {
				$_SESSION['customer_id'] = $c[0];
				$_SESSION['customer_default_address_id'] = $c[1];
				$_SESSION['customers_authorization'] = $c[2];
				$_SESSION['customer_first_name'] = $c[3];
				$_SESSION['customer_last_name'] = $c[4];
				$_SESSION['customer_country_id'] = $c[5];	
				$_SESSION['customer_zone_id'] = $c[6];
				$_SESSION['cart']->restore_contents();
			}
		}
	}

I'm no expert, but there doesn't seem to be anything wrong with that. And I've checked in the db that the required data is present. :unsure:

hey, is this a joke... because you just put the lines in the wrong file!! :blush:

the code you just posted (for automatically logging in) is meant to be put in **"/includes/modules/pages/index/header_php.php"

**the file "includes/modules/pages/login/header_php.php" (where you put the mentioned code) is for the original login-process where you set the cookie for the permanent login.

:P if you experience any troubles, post again!

Damn - my human side is showing again! :D

But actually, not as bas as it seemed...I HAD put it in the right place - I had just pasted the wrong filename in that previous post.

hehe, alright then :P

well, it seems, it doesn't find the customer_id in the cookie.

could you please add this code before the "$c = explode(....)":
"echo $_COOKIE["zencart_cookie_permlogin"];"
and post the output here?

Will do . but while I'm doing that, could you be a bit more specific about > does all the stuff around line 70. just after this we hook in. put that code there

Should it be at about line 72 after $check_country or about line 80 after the $_SESSION lines?

This one is in login/header_php.php