Post by devtolu » Sun Nov 18, 2018 2:55 am

Please what could be happening, am using opencart 2.2.0.0 and i have been logging into the admin for the past one year, i just tried to access it and it locked me out. Even when i click on login without the username and password it does not return any error message. I have gone to the database through phpmyadmin to reset the password and it does not work.

Here is the admin url https://www.zeeeight12.com/admin/index ... mmon/login

I have also tried the forgot password and it does not work, no email with reset password link is sent to me.

Kindly help me out , thank you.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by thekrotek » Sun Nov 18, 2018 3:04 am

You do realize, that in database password is stored encrypted, right?

Professional OpenCart extensions, support and custom work.
Contact me via email or Skype by support@thekrotek.com


User avatar
Expert Member

Posts

Joined
Sun Jul 03, 2016 12:24 am


Post by xxvirusxx » Sun Nov 18, 2018 3:18 am

I see you have SSL.
You have changed in both configs from http to https ?

Upgrade Service | OC 2.3.0.2 PHP 8 | My Custom OC 3.0.3.8 | Buy me a beer


User avatar
Expert Member

Posts

Joined
Tue Jul 17, 2012 10:35 pm
Location - România

Post by devtolu » Sun Nov 18, 2018 3:43 am

thekrotek wrote:
Sun Nov 18, 2018 3:04 am
You do realize, that in database password is stored encrypted, right?
Yes i do, i select MD5 from phpmyadmin and entered another password. But if you leave both fields blank and you try to login shouldn't it display erro messages like "invalid username / password"

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by devtolu » Sun Nov 18, 2018 3:49 am

xxvirusxx wrote:
Sun Nov 18, 2018 3:18 am
I see you have SSL.
You have changed in both configs from http to https ?
Yes i did , will it affect login operations? i have other websites i encrypted and they function appropriately.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by xxvirusxx » Sun Nov 18, 2018 4:36 am

Post here admin config, but without database name, password etc..

Upgrade Service | OC 2.3.0.2 PHP 8 | My Custom OC 3.0.3.8 | Buy me a beer


User avatar
Expert Member

Posts

Joined
Tue Jul 17, 2012 10:35 pm
Location - România

Post by devtolu » Sun Nov 18, 2018 5:19 am

xxvirusxx wrote:
Sun Nov 18, 2018 4:36 am
Post here admin config, but without database name, password etc..

// HTTP
define('HTTP_SERVER', 'http://www.zeeeight12.com/admin/');
define('HTTP_CATALOG', 'http://www.zeeeight12.com/');

// HTTPS
define('HTTPS_SERVER', 'https://www.zeeeight12.com/admin/');
define('HTTPS_CATALOG', 'https://www.zeeeight12.com/');

// DIR
define('DIR_APPLICATION', '/home/zeeeight12/public_html/admin/');
define('DIR_SYSTEM', '/home/zeeeight12/public_html/system/');
define('DIR_IMAGE', '/home/zeeeight12/public_html/image/');
define('DIR_LANGUAGE', '/home/zeeeight12/public_html/admin/language/');
define('DIR_TEMPLATE', '/home/zeeeight12/public_html/admin/view/template/');
define('DIR_CONFIG', '/home/zeeeight12/public_html/system/config/');
define('DIR_CACHE', '/home/zeeeight12/public_html/system/storage/cache/');
define('DIR_DOWNLOAD', '/home/zeeeight12/public_html/system/storage/download/');
define('DIR_LOGS', '/home/zeeeight12/public_html/system/storage/logs/');
define('DIR_MODIFICATION', '/home/zeeeight12/public_html/system/storage/modification/');
define('DIR_UPLOAD', '/home/zeeeight12/public_html/system/storage/upload/');
define('DIR_CATALOG', '/home/zeeeight12/public_html/catalog/');

// DB
define('DB_PORT', '3306');
define('DB_PREFIX', 'oc_');

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by xxvirusxx » Sun Nov 18, 2018 5:49 am

Change this

Code: Select all

// HTTP
define('HTTP_SERVER', 'http://www.zeeeight12.com/admin/');
define('HTTP_CATALOG', 'http://www.zeeeight12.com/');
in this

Code: Select all

// HTTP
define('HTTP_SERVER', 'https://www.zeeeight12.com/admin/');
define('HTTP_CATALOG', 'https://www.zeeeight12.com/');

Upgrade Service | OC 2.3.0.2 PHP 8 | My Custom OC 3.0.3.8 | Buy me a beer


User avatar
Expert Member

Posts

Joined
Tue Jul 17, 2012 10:35 pm
Location - România

Post by devtolu » Sun Nov 18, 2018 6:13 am

xxvirusxx wrote:
Sun Nov 18, 2018 5:49 am
Change this

Code: Select all

// HTTP
define('HTTP_SERVER', 'http://www.zeeeight12.com/admin/');
define('HTTP_CATALOG', 'http://www.zeeeight12.com/');
in this

Code: Select all

// HTTP
define('HTTP_SERVER', 'https://www.zeeeight12.com/admin/');
define('HTTP_CATALOG', 'https://www.zeeeight12.com/');
I have done this but it did not work, NOTE: the username and password validation does not work.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by xxvirusxx » Sun Nov 18, 2018 4:18 pm

devtolu wrote:
Sun Nov 18, 2018 6:13 am
I have done this but it did not work, NOTE: the username and password validation does not work.
So now display message/error on admin after changes in https?

Try to disable .htaccess if is enabled, or post htacces here.

Upgrade Service | OC 2.3.0.2 PHP 8 | My Custom OC 3.0.3.8 | Buy me a beer


User avatar
Expert Member

Posts

Joined
Tue Jul 17, 2012 10:35 pm
Location - România

Post by devtolu » Mon Nov 19, 2018 6:01 am

xxvirusxx wrote:
Sun Nov 18, 2018 4:18 pm
devtolu wrote:
Sun Nov 18, 2018 6:13 am
I have done this but it did not work, NOTE: the username and password validation does not work.
So now display message/error on admin after changes in https?

Try to disable .htaccess if is enabled, or post htacces here.

Here is the .htacess below:

RewriteEngine on
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$
RewriteRule ^(.*)$ https://www.zeeeight12.com/$1 [R,L]

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by devtolu » Mon Nov 19, 2018 6:20 pm

devtolu wrote:
Mon Nov 19, 2018 6:01 am
xxvirusxx wrote:
Sun Nov 18, 2018 4:18 pm
devtolu wrote:
Sun Nov 18, 2018 6:13 am
I have done this but it did not work, NOTE: the username and password validation does not work.
So now display message/error on admin after changes in https?

Try to disable .htaccess if is enabled, or post htacces here.

Here is the .htacess below:

RewriteEngine on
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$
RewriteRule ^(.*)$ https://www.zeeeight12.com/$1 [R,L]
See this URl , and try to login with out the username and password , can you see the error message returned?
http://giftscrush.com/opencart2/admin/

Then check the problematic URL as stated above and see the response.
https://www.zeeeight12.com/admin/

Do we have professionals who could direct me on what to do here please, thanks xxxvirusxxx, you gave me a lot of ideas but am still stuck.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by IP_CAM » Wed Nov 21, 2018 2:34 am


My Github OC Site: https://github.com/IP-CAM
5'200 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by devtolu » Wed Nov 21, 2018 2:59 am

IP_CAM wrote:
Wed Nov 21, 2018 2:34 am
Open Cart Administrator Password Reset tool
http://forum.opencart.com/viewtopic.php ... 32#p592544
Forget the admin password
https://www.opencart.com/index.php?rout ... n_id=30917

What files can i reupload as no login validation is performed on opencart admin. Is the validation done via javascript or server side scripting? what files do i need to re-upload so login authentication can work, password has been reset but login si not working, i migrated the website from a hosting company to another in january 2018 , but am not sure when this issue started.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by ADD Creative » Fri Nov 23, 2018 11:52 pm

Validation is done server side. You could download the same version as you used originally from https://www.opencart.com/index.php?rout ... ad/history. Then use a file comparison program to see if there are any differences to your files.

Also there can be issues with password containing the following.

Code: Select all

& " < >

www.add-creative.co.uk


Expert Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by devtolu » Sat Nov 24, 2018 12:16 am

ADD Creative wrote:
Fri Nov 23, 2018 11:52 pm
Validation is done server side. You could download the same version as you used originally from https://www.opencart.com/index.php?rout ... ad/history. Then use a file comparison program to see if there are any differences to your files.

Also there can be issues with password containing the following.

Code: Select all

& " < >
I wanted to reupload all the files but i was scared that i could overwrite a file that could affect the installation , NOTE: is an existing cart with orders and payment, hope it won't affect any of these.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by ADD Creative » Sat Nov 24, 2018 3:38 am

Best to download your files from your server and compare them locally to a clean version with a file comparison program.

www.add-creative.co.uk


Expert Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by devtolu » Sun Dec 02, 2018 1:33 am

After doing all that was suggested, i am willing to do something new, please tell me if am doing the right thing.
I intend to backup the database, then delete the installed opencart, then install a fresh opencart, install the theme, install all modules/plugins (payment plugin), then overwrite the database with the database we backup up before the re-installation. I do hope this will solve the login issue.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by devtolu » Tue Dec 04, 2018 3:41 pm

I did not get a response from the pro users here if i can do as discussed in the previous post.

New member

Posts

Joined
Mon Feb 06, 2017 6:02 am

Post by ADD Creative » Tue Dec 04, 2018 10:06 pm

You could do that. Make sure you take backups of the current files as well as the database. There may be image uploads you need.

www.add-creative.co.uk


Expert Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom
Who is online

Users browsing this forum: Google [Bot] and 71 guests