![]() |
Displaying customer passwords to admin
This mod was created back in 2004 and may violate current PCI compliance rules. Use at your own risk!
Here's another quick mod I find useful. Good for sites that the admin frequently need customer's passwords. For 4.0.8, find main/register_account.tpl (other versions I think it's just in main/register.tpl) and look for this code: Code:
<TR> And make the <input> tag look like this: Code:
<INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}"> This should work in all 3.x and 4.x versions of X-cart. All you have to do is find similar code and add the {if}{else}{/if} statement in the <input> tag. Carrie |
Re: Displaying customer passwords to admin
Thanks, for this great code helped allot dealing with customer
|
Didn't work on 4.0.12
Regards |
Can you give more info? Post your changed code, etc? Hard to help with just that information.
Thanks, Carrie |
In register_account.tpl there are two different lines.
Code:
<INPUT type="password" id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}"> You want the second one I believe. |
|
Great! Glad you got it figured out. :)
Carrie |
Works great in 4.13 Thanks!!!!
|
Where is it in 3.5.9? Can't seem to find it!
|
Try
skin1/admin/register.tpl Carrie |
Thanks for that... its in skin1/admin/main/register.tpl
|
I dont want to sound like an idiot, but what does this mod actually do? Because I assumed it would allow admin to see the customers password. Is this correct? If it is, I must have done something wrong.
|
Yes it does allow the admin to see the customer's passwords like the original subject states. When you view a customer's profile in the admin, this mod will allow you to see the passwords in plain text down at the bottom of the screen in the password box section.
If you post the code you changed, I may be able to help you get it working. Thanks, Carrie |
also need for confirm password field
This is for a 3.4.7 modified, but you should get the general idea , other 3.4.x should be similar.
Code:
<TD vAlign=top align=left> Nice mod Carrie - kudos LeeD |
Thanks for helping me out guys...appreciate it. I posted the whole file admin/main/register.tpl
Code:
{* $Id: register.tpl,v 1.4.2.5 2004/04/09 07:07:27 svowl Exp $ *} |
Can someone please tell me where this is in 4.0.13. I found register.tpl in skin1/admin/main but could not find this coding? Did it change?
Thanks a lot |
Re: Displaying customer passwords to admin
Try main/register_account.tpl for versions 4.0.x
Carrie |
Thanks
|
Thanks again Carrie
Works Perfectly in 4.0.13 |
Great Mod Carrie:
Worked well in 4.018. Will be a great asset when we open live. |
Quote:
Great! Glad we could help! Carrie |
Re: Displaying customer passwords to admin
Works in 4.1.3 as well...
|
Re: Displaying customer passwords to admin
thanks for this nice mod, but is there also a way for the password to show up in the 'fulfillment staff' view of the order? since this level of user cannot see/modify user profiles, they can't get to the page where this post's mod shows the password. any help would be great!
|
Re: Displaying customer passwords to admin
Quote:
Works well in 4.1.6 Thanks |
Re: Displaying customer passwords to admin
Just to confirm BCSE Work
for 4.1.7 skin1/main/register_account.tpl find this section <tr> <td align="right">{$lng.lbl_password}</td> <td><font class="Star">*</font></td> <td nowrap="nowrap"><input type="password" id="passwd1" name="passwd1" size="32" maxlength="64" value="{$userinfo.passwd1}" /> {if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if} </td> </tr> and replace with <tr> <td align="right">{$lng.lbl_password}</td> <td><font class="Star">*</font></td> <td nowrap="nowrap"><INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}" /> {if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if} </td> </tr> Works a treat thanks go out to BSCE |
Re: Displaying customer passwords to admin
Quote:
I had this working in 2 minutes. It works like a charm. Thanks for the work Carrie and thanks to shishapipe for bringing it up to date by verifying it worked on 4.1.7 |
Re: Displaying customer passwords to admin
Great! Glad this is still useful! :)
Carrie |
Re: Displaying customer passwords to admin
very nice. thanks
|
Re: Displaying customer passwords to admin
Dear shishapipe,
i did it for 4.1.7, works great! Thanks to you and BSCE ))) |
Re: Displaying customer passwords to admin
worked perfect ! 4.0.13 gold.
Thank you so much ! |
Re: Displaying customer passwords to admin
Works great also in v4.1.8 nice little mod, thanks Carrie
Regards Dean |
Re: Displaying customer passwords to admin
Please could you explain the reason of such a mod? Why do you need customer's passwords? I believe there is a more secure solution than displaying customer's passwords in the store back end.
|
Re: Displaying customer passwords to admin
Thanks for this little mod.
At first it didn't work, but then I realized that I was replacing the code for anonymous users (same .tpl file) instead of registered ones. Once that was changed it worked great. Thanks! |
Re: Displaying customer passwords to admin
I'm late with my posting, but should you ever come back to see an answer, this is a reason I'd find this mod so handy. In many carts I've worked on for customers, the sad reality is that customers do have problems, not everyone is savvy enough to figure things out and especially with carts that have egoods (downloadable) items, people seem to have all kinds of problems, even something as simple as changing there email, some carts don't give the ability to change in admin, so you might have to go into there profile yourself and do it. I can't count the number of times I've changed emails for customers alone, or had to tell them how to get a new password, or change an address, or find out why they aren't seeing there order, but I do in admin, so for those reasons, this mod is handy to have just if it saves you time writing them to ask for there password.
|
Re: Displaying customer passwords to admin
Would anyone know how I get this code working in 4.19? I had it working in 4.15, but for some reason the register.tpl now seems different from my 4.15 version. (I'm still using 4.04, had been upgrading to 4.15 when 4.19 came out, so figured I'd just upgrade to the stable version. So please don't make me change my signature for that. :)
|
Re: Displaying customer passwords to admin
Hi:
Works great in v 4.1.9. Before you do this, copy and paste your register_account.tpl onto notepad in case you mess up and need to paste the original back and save it. What I do is 1) Copy the entire register_account.tpl file onto notebook twice. 2) I use the first copy of notebook to search for the areas to edit. Then I copy the entire page and paste it back onto the edit templates field and save it. If it doesn't work, I have my 2nd notebook copy of the original there to paste and save to the original settings. ------------------------------------------------------------- Open skin1/main/register_account.tpl Look for: <tr> <td align="right">{$lng.lbl_password}</td> <td><font class="Star">*</font></td> <td nowrap="nowrap"><input type="password" id="passwd1" name="passwd1" size="32" maxlength="64" value="{$userinfo.passwd1|escape}" /> {if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if} </td> </tr> then replace it with <tr> <td align="right">{$lng.lbl_password}</td> <td><font class="Star">*</font></td> <td nowrap="nowrap"><INPUT {if $usertype eq "A" or $usertype eq "p"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1|escape}" /> {if $reg_error ne "" and $userinfo.paswd1 eq ""}<font class="Star"><<</font>{/if} </td> </tr> Open up Users in Admin Open up any user and see if you see the first password displayed. |
Re: Displaying customer passwords to admin
Quote:
Not sure why you think this is so un-secure? It just saves me (and many others) from the extra step of viewing the source of the page when viewing a customer's profile and reading the password in the source. It's already been sent across the internet to your webpage (hopefully an admin uses https so it's atleast encrypted across the connection rather than sent in plain text). Even though we deal with people who actually own x-cart, sometimes we have to add things to a customer's cart for them for some reason or another. It's also convenient for giving a customer their password when you are on the phone with them and they do not want to do the email password recovery. Just my 2 cents. Thanks! Carrie |
Re: Displaying customer passwords to admin
Just found this thread again after such a long period of time, but wanted to give you a heads up equine.. Thank you.. did get this working for 4.1.9 and another thanks to Carrie for original mod.
|
Re: Displaying customer passwords to admin
Just thought that I would pass along this works fine in 4.3
The template in 4.3 is register_account.tpl down around line 57. Mike |
Re: Displaying customer passwords to admin
Just found this today, and applied it to 4.0.17 and 4.0.18 carts. Makes me wonder how many other gems are hidden in the depths of this forum.
Thanks for offering it. Dan |
All times are GMT -8. The time now is 04:22 AM. |
Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.