[SOVLED] wrong admin password after migration

There being nothing in the thread to trigger it, the stray thought is a non sequitur that resolves nothing in the thread and moreover does not support hazarding to guess that there is a (nonexistent) security flaw in OC.

Having two config.php files with the same (or for that matter any) DB section IS NOT any sort or degree of security flaw in OC. The storefront has its own index.php file and its own database access. Admin has its own index.php file and its own database access. Their DB sections are the same, they access the same database.

Good grief.

i removing the www. from the config.php and admin/config.php. it work

in my case the problem was the htaccess file i had added a command
RewriteEngine On
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]

and although i could login as a user front end i could not from backend.