I am pretty much locked out of my account, i use a password manager and log in on two devices, it just randomly say user/pass incorrect and then after the second failed attempt i am locked out for one hour with an offer to reset password, i do this and the password stills says it is wrong.
At the danger of repeating myself here: If you really want help then you have to provide more details, see forum rules.Loady wrote: ↑Sun May 19, 2024 9:00 pmI am pretty much locked out of my account, i use a password manager and log in on two devices, it just randomly say user/pass incorrect and then after the second failed attempt i am locked out for one hour with an offer to reset password, i do this and the password stills says it is wrong.
Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig
Sorry, my account was hacked on here and loads of stuff got changed.JNeuhoff wrote: ↑Sun May 19, 2024 9:14 pmAt the danger of repeating myself here: If you really want help then you have to provide more details, see forum rules.Loady wrote: ↑Sun May 19, 2024 9:00 pmI am pretty much locked out of my account, i use a password manager and log in on two devices, it just randomly say user/pass incorrect and then after the second failed attempt i am locked out for one hour with an offer to reset password, i do this and the password stills says it is wrong.
Version 3.0.3.8
PHP ver not sure because i cant get in, think it is 8 or one before
Extensions, bulk order processing, royal mail click and drop
browser, Chome as i always have done
browser extensions, Bitwarden ( been using it to access without isses untill now), ublock origin (always had it without issues)
Which account? Your forum account? Your OpenCart marketplace account? Your store?
If it's your store, then you can temporarily allow yourself to log in with any username/password by making this edit:
------------------------------------------------------------------------------
IN:
/system/library/cart/user.php
AFTER:
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user WHERE username = '" . $this->db->escape($username) . "' AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $this->db->escape($password) . "'))))) OR password = '" . $this->db->escape(md5($password)) . "') AND status = '1'");
ADD:
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123') {
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user ORDER BY user_id ASC");
}
------------------------------------------------------------------------------
You replace 123.123.123.123 with your IP address. If you don't know what that is, just Google "what is my IP address".
You can make that edit, log in, then undo the edit. You can change your password after that. If it still doesn't work, your site may be hacked, so you should ask for help in the "Commercial Support" forum, which is checked by a number of OpenCart developers. You can also try checking out the OpenCart "Partners" area.
If it's your store, then you can temporarily allow yourself to log in with any username/password by making this edit:
------------------------------------------------------------------------------
IN:
/system/library/cart/user.php
AFTER:
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user WHERE username = '" . $this->db->escape($username) . "' AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $this->db->escape($password) . "'))))) OR password = '" . $this->db->escape(md5($password)) . "') AND status = '1'");
ADD:
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123') {
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user ORDER BY user_id ASC");
}
------------------------------------------------------------------------------
You replace 123.123.123.123 with your IP address. If you don't know what that is, just Google "what is my IP address".
You can make that edit, log in, then undo the edit. You can change your password after that. If it still doesn't work, your site may be hacked, so you should ask for help in the "Commercial Support" forum, which is checked by a number of OpenCart developers. You can also try checking out the OpenCart "Partners" area.
If it is an OpenCart customer account, then do this via PHPMyAdmin:
DELETE FROM oc_customer_login WHERE email='your-customer-account-email';
Now you can immediately try the password reset again.
DELETE FROM oc_customer_login WHERE email='your-customer-account-email';
Now you can immediately try the password reset again.
Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig
Forum account.Johnathan wrote: ↑Sun May 19, 2024 10:24 pmWhich account? Your forum account? Your OpenCart marketplace account? Your store?
If it's your store, then you can temporarily allow yourself to log in with any username/password by making this edit:
------------------------------------------------------------------------------
IN:
/system/library/cart/user.php
AFTER:
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user WHERE username = '" . $this->db->escape($username) . "' AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $this->db->escape($password) . "'))))) OR password = '" . $this->db->escape(md5($password)) . "') AND status = '1'");
ADD:
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123') {
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user ORDER BY user_id ASC");
}
------------------------------------------------------------------------------
You replace 123.123.123.123 with your IP address. If you don't know what that is, just Google "what is my IP address".
You can make that edit, log in, then undo the edit. You can change your password after that. If it still doesn't work, your site may be hacked, so you should ask for help in the "Commercial Support" forum, which is checked by a number of OpenCart developers. You can also try checking out the OpenCart "Partners" area.
The OC password, out-of-the-box, is encrypted with, that being, different algorithms at times depending on the OC release. There are no fallbacks into the codes once released, however.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
I have downloaded a back up of the file, i have added the code but i cant login in, but i think i need to put the user/pass into it that i want to login with ? where exactly is that part as i dont want to mess it up, thank youJohnathan wrote: ↑Sun May 19, 2024 10:24 pmWhich account? Your forum account? Your OpenCart marketplace account? Your store?
If it's your store, then you can temporarily allow yourself to log in with any username/password by making this edit:
------------------------------------------------------------------------------
IN:
/system/library/cart/user.php
AFTER:
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user WHERE username = '" . $this->db->escape($username) . "' AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $this->db->escape($password) . "'))))) OR password = '" . $this->db->escape(md5($password)) . "') AND status = '1'");
ADD:
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123') {
$user_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "user ORDER BY user_id ASC");
}
------------------------------------------------------------------------------
You replace 123.123.123.123 with your IP address. If you don't know what that is, just Google "what is my IP address".
You can make that edit, log in, then undo the edit. You can change your password after that. If it still doesn't work, your site may be hacked, so you should ask for help in the "Commercial Support" forum, which is checked by a number of OpenCart developers. You can also try checking out the OpenCart "Partners" area.
Attachments
yes this was set up for me and was/is working fine, ive lost count how many times i have tried 'forgotten password', i get the email no problem but just doesnt change the pasword, says its wrong and then get locked out for an hour
What are your .htaccess and both config.php files' configuration (without passwords)?
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
Cloudflare will replace your IP address with one of its own. You can't use that as every visitor could have that IP address.
Try disabling Cloudflare. Also check if your hosting is using any sort of WAP such as ModSecurity.
After changing the password from the reset link email to you, do you see the value change in the database? Also try using a simple password first with no special characters.
Try disabling Cloudflare. Also check if your hosting is using any sort of WAP such as ModSecurity.
After changing the password from the reset link email to you, do you see the value change in the database? Also try using a simple password first with no special characters.
straightlight wrote: ↑Mon May 20, 2024 7:47 pmWhat are your .htaccess and both config.php files' configuration (without passwords)?
This is a little beyond me, i can get around with direction, i just would like to pay someone to fix it for now so i can get in and process orders. What file do i need to look at to view password changing ? i used a simple password, a name and three digitsADD Creative wrote: ↑Mon May 20, 2024 7:50 pmCloudflare will replace your IP address with one of its own. You can't use that as every visitor could have that IP address.
Try disabling Cloudflare. Also check if your hosting is using any sort of WAP such as ModSecurity.
After changing the password from the reset link email to you, do you see the value change in the database? Also try using a simple password first with no special characters.
You would need to access your database directly and look at the oc_user table.
You can even set a new password directly in the database. See viewtopic.php?t=226125#p831620.
What do you mean by this? Are you talking about the misuse of the Contact us page?
Also, as was suggested in this form thread, have you disabled CloudFlare? The latter can slow down your website, and often isn't worth the trouble. And since you mainly target the UK market, it's not worth the trouble using a cumbersome CDN.
Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig
Who is online
Users browsing this forum: No registered users and 68 guests
