Turning Send Welcome email option off ?

Thanks Dr Byte for the advice. I have changed the welcome email message by applying my previous example code on the create_account.php file (under the modules directory) and it works like a charm! Is is safe to include in the email the customer's password or was it omitted from the original module for security purposes?

Regards,

Hansi

DrByte:

The customer's login name is their email address.
Do you really need to tell them their email address, when the email you're trying to send their password in is going to be sent TO that email address ?

hansi:

Is is safe to include in the email the customer's password or was it omitted from the original module for security purposes?For security purposes, Zen Cart doesn't email the customer's selected password in the welcome email.
If you want to operate your store differently, that's up to you. Be sure to disclose that fact in your site's privacy policy so that customers know you'll be sending their unencrypted password in emails.

i think i know the problem with my "password in email doesn't show up".
the costumers password caller were
$customers_password
and it suppose to be like this (with the others):

$email_text .= "\n\n" . sprintf(EMAIL_TEXT, $password) . EMAIL_CONTACT . EMAIL_GV_CLOSURE;
$html_msg['EMAIL_MESSAGE_HTML'] = str_replace('\n','',sprintf(EMAIL_TEXT, $password));
$html_msg['EMAIL_CONTACT_OWNER'] = str_replace('\n','',EMAIL_CONTACT);
$html_msg['EMAIL_CLOSURE'] = nl2br(EMAIL_GV_CLOSURE);

it just right there all this time but i didn't see it :oops: hansi just remind me today with his old post that i just see clearly without any headache. wrongfully i just compare them both (with the add_customers.php) and add the same code, but nothing works. all i have to do then just removing the prefix customers_ to match the caller function :P
i dont have to worry about unencrypted emails since i don't use any online payment such credit card in my store. and even no one using credit card on web in my country origin. but still i have to enclose the warning.

thank you thank you thank you very very much!!!!

uh..one more..just for information, site maps doesn't show my new defined information page which i added manually without any sql query. this is why i have to add a new row data in zen_configuration table with phpmyadmin (this one i think more safe than sql patches tool) fill it with my new defined page name and so on, not to forget the configuration_id to match its auto increment to keep it sequenced. then i add a couple code before shippinginfo defined line to several php files. now i can turn them on or off via admin.

my store is ready now. i am about to launch it today.
Hansi, DrByte...you guys heal my pain :D GodBlessYouAll

Hi Mbaa,

You are more than welcome. It seems that as per the advice of DrByte it is after all not a good idea (for security reasons) to send the customer the password in the welcome message. I am not sure if there is a way to overcome this problem or if we can send an encrypted email message?

Hansi

The usual technique is to send a link to a 'confirmation' page using a 1 time password. On the confirmation page the customer is invited to change their password to a permanent one?
Encrypted emails are certainly feasible, but I think you'll scare away more customers than you attract.

Hi Chuckl,

Thanks for the advice. How do I create this confirmation page link? When the use creates an account they decide their password but your idea is definitely a good one. Create a temporary password and then ask the users to change it to a permanent one. I know that MuySQL PHPadmin allows for the creation of a random password and we can perhaps emulate that technique to serve our purpose?

Regards,

Hansi

The newsletter subscribe mod has a feature like that, where the signup email contains a link to confirm. Worth having a look and adapting to you password requirements.