Post by JAY6390 » Sat Apr 23, 2011 2:18 am

Hi there. This is a simple vQmod for any of you guys having issues logging into your OC. It creates a dropdown of all users created so you can choose one and login. No password is required! Ideal for those who need to reset their passwords but don't want to go editing database values etc

NOTE: THIS IS ONLY FOR TEMPORARY USE. IT'S TO BE DELETED ONCE YOU HAVE LOGGED IN OR YOU FACE POSSIBLE HACK ATTEMPTS

Screenshot:
Image

All feedback is welcomed

Image


User avatar
Guru Member

Posts

Joined
Wed May 26, 2010 11:47 pm
Location - United Kingdom

Post by Brook » Sat Apr 23, 2011 9:31 pm

Jay,

I really like the idea behind this vQmod module. Great idea! I really need to have all my users enter a password, just seems much more secure. Can you make a vQmod module that does the same thing (allows users to select a user from a dropdown box) except all users when logging in have to enter a password, just like the original admin login screen?

Thank you

Active Member

Posts

Joined
Wed Feb 24, 2010 12:15 am

Post by Qphoria » Sat Apr 23, 2011 9:48 pm

As assumed, this looks to be confusing people as it confused me. As I undertstand it, this is meant to be a recovery script ONLY, not an everyday use script. But I think many people are thinking it is a dropdown username box as opposed to a text field. But that is a very bad idea because it cuts down the need to guess the username and they can simply bruteforce the password.

Either way it is important to note that this is a very insecure script designed only to assist in recovering access in the case you get locked out of admin and should be immediately removed after resetting the password. The description is fuzzy IMO.

Image
Donate!|OpenCart Basics|GeoZones
Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by JAY6390 » Sat Apr 23, 2011 10:10 pm

Hi Brook

As Qphoria has rightly pointed out this isn't for general logins, it's only designed to aid in getting back into your admin when you lose your credentials. I made it because of my other admin password reset tool being so popular with people, and thought having a vQmod version would make it even easier since you just drop in this file, select the user and login, and can change your password yourself that way

Qphoria has also pointed out that having a listing of your usernames is highly insecure for general use, it's only there for those who need to log in as their user and can't remember their id, or for logging into another account to test what they can see etc in their admin screen

if you feel comfortable with that, then let me know and I'll tell you how you can do that (or release another vQmod for that purpose - with a big message saying how insecure it is :) )

Image


User avatar
Guru Member

Posts

Joined
Wed May 26, 2010 11:47 pm
Location - United Kingdom

Post by Brook » Sat Apr 23, 2011 10:14 pm

Makes sense. Thank you Q and Jay for your replies.

Active Member

Posts

Joined
Wed Feb 24, 2010 12:15 am

Post by sunsys » Sun Jul 26, 2015 1:12 am

Will this vqmod work with oc-2.x.x.x or works just with oc-1.5.x.x.

Regards,
Sun Systems
Industrial Electronics and Instrumentation


User avatar
Active Member

Posts

Joined
Tue Jan 27, 2015 5:19 am
Who is online

Users browsing this forum: No registered users and 3 guests