Re: X-Cart 4.5.5 released
 

I did the 4.5.4 to 4.5.5 update on my test site last night and it went extremely smooth, only had one file I had to patch manually.

Re: X-Cart 4.5.5 released
 

If it's just the admin, then no worries. The moment I have to tell my customers they must change their passwords, I will get very pissy.

Re: X-Cart 4.5.5 released
 

This password thing was an option in previous versions.... I too don't see the need to hard code it.

Re: X-Cart 4.5.5 released
 

Me too, with minor customization. I got a lot of can't patch error with the upgrade pack for x-cart 4.5.4 to x-cart 4.5.5

Re: X-Cart 4.5.5 released
 

You do know it is not mandatory to upgrade every time new version is out :)

Re: X-Cart 4.5.5 released
 

It is for admin side only. This new security feature can be disabled for customers side.

Re: X-Cart 4.5.5 released
 

This is a part of security improvements introduced in 4.5.5.
"Weak" passwords are not suitable for admin/provider accounts now.

There is still an option to enable/disable such feature, but it only affects customer accounts.

p.s. Simply increasing a password length from 6 to 7 characters you increase password discovery time by about 100 times.
You can refer to the following page for more info:
http://blog.agilebits.com/2012/03/16/strong-security-requires-strong-passwords/

Re: X-Cart 4.5.5 released
 

Broken down - biggest mistake I ever made to upgrade this thing, I'll pay $$$ to get this running again.

Re: X-Cart 4.5.5 released
 

12 hours later...

Took the whole thing back to 4.5.4. Made sure all files were stock. Re-upgraded, no files in question this time. But...locked out as admin again. Manually applied patch.sql line by line. Removed cache files. Removed cookies, removed cache. Sends me a link to restore my login, that sends me to the customer front end. Try to re-do the password, supposedly works but then locked out again.

Paid $139 for the "Hot Rush". There is a guy giving me advice bits and pieces, I feel like I'm in school, it seems they don't want to go in there and directly fix it. I'm back to square one - completely locked out as admin, my store is closed, and probably will lose $1k-$2k in sales because of this.


This experience sucks, there's something wrong here because I've been doing this for 10 years with x-cart and have never got stuck like I have this time.

Re: X-Cart 4.5.5 released
 

Could anyone here with a working copy of 4.5.5 please take a look at their "xcart_xauth_user_ids" table and see the structure? Mine only shows 5 columns, does yours have more?

Really not please here....


[14-Feb-2013 20:50:45] SQL error:

SQL query : SELECT xcart_xauth_user_ids.auth_id, xcart_xauth_user_ids.id, xcart_xauth_user_ids.identifier, xcart_xauth_user_ids.provider, xcart_xauth_user_ids.service, xcart_customers.usertype, xcart_xauth_user_ids.signature FROM xcart_customers INNER JOIN xcart_xauth_user_ids ON xcart_customers.id=xcart_xauth_user_ids.id AND xcart_customers.usertype IN ('A','P')
Error code : 1054
Description : Unknown column 'xcart_xauth_user_ids.signature' in 'field list'
Request URI: /admin/home.php?keep_https=yes
Backtrace:
/home/ocha/public_html/include/func/func.db.php:309
/home/ocha/public_html/include/func/func.db.php:209
/home/ocha/public_html/include/func/func.db.php:489
/home/ocha/public_html/include/func/func.security.php:77
/home/ocha/public_html/admin/auth.php:105
/home/ocha/public_html/admin/home.php:44