X-Cart forums - Displaying customer passwords to admin

X-Cart forums (https://forum.x-cart.com/index.php)

- Dev Questions (https://forum.x-cart.com/forumdisplay.php?f=20)

- - Displaying customer passwords to admin (https://forum.x-cart.com/showthread.php?t=10846)

Displaying customer passwords to admin

This mod was created back in 2004 and may violate current PCI compliance rules. Use at your own risk!

Here's another quick mod I find useful. Good for sites that the admin frequently need customer's passwords.

For 4.0.8, find main/register_account.tpl (other versions I think it's just in main/register.tpl)
and look for this code:

Code:

<TR>

<TD align="right">{$lng.lbl_password}</TD>

<TD><FONT class="Star">*</FONT></TD>

<TD nowrap><INPUT type="password" id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

{if $reg_error ne "" and $userinfo.passwd1 eq ""}<FONT class="Star">&lt;&lt;</FONT>{/if} 

</TD>

</TR>

And make the <input> tag look like this:

Code:

<INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

This should work in all 3.x and 4.x versions of X-cart. All you have to do is find similar code and add the {if}{else}{/if} statement in the <input> tag.

Carrie

Re: Displaying customer passwords to admin

Thanks, for this great code helped allot dealing with customer

Didn't work on 4.0.12
Regards

Can you give more info? Post your changed code, etc? Hard to help with just that information.

Thanks,

Carrie

In register_account.tpl there are two different lines.

Code:

<INPUT type="password" id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

You want the second one I believe.

Thanks sstillwell@aerostich.com,

works perfect in 4.0.12

Thanks BCSE, a great code.
All the best

Great! Glad you got it figured out. :)

Carrie

Works great in 4.13 Thanks!!!!

Where is it in 3.5.9? Can't seem to find it!

Try
skin1/admin/register.tpl

Carrie

Thanks for that... its in skin1/admin/main/register.tpl

I dont want to sound like an idiot, but what does this mod actually do? Because I assumed it would allow admin to see the customers password. Is this correct? If it is, I must have done something wrong.

Yes it does allow the admin to see the customer's passwords like the original subject states. When you view a customer's profile in the admin, this mod will allow you to see the passwords in plain text down at the bottom of the screen in the password box section.

If you post the code you changed, I may be able to help you get it working.

Thanks,

Carrie

also need for confirm password field

This is for a 3.4.7 modified, but you should get the general idea , other 3.4.x should be similar.

Code:

<TD vAlign=top align=left>

{* <input type=password name="passwd1" id="passwrd1" maxlength="32" style="WIDTH: 200px" value="{$userinfo.passwd1}"> *}

<INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

</TD>

</TR>

<TR>

<TD vAlign=top align=left>[img]{$http_location}/{$ImagesDir|replace:[/img]</TD>

</TR>

<TR>

<TD vAlign=top align=left>

{* <input type=password name="passwd2" id="passwrd2" maxlength="32" style="WIDTH: 200px" value="{$userinfo.passwd2}"> *}

<INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd2" name="passwrd2" size="32" maxlength="32" value="{$userinfo.passwd2}">

Nice mod Carrie - kudos

LeeD

Thanks for helping me out guys...appreciate it. I posted the whole file admin/main/register.tpl

Code:

{* $Id: register.tpl,v 1.4.2.5 2004/04/09 07:07:27 svowl Exp $ *}

{include file="check_email_script.tpl"}

{include file="check_zipcode_js.tpl"}

{if $smarty.get.mode eq "update" or $smarty.post.mode eq "update"}

{assign var="last_location" value=$lng.lbl_modify_profile}

{elseif $smarty.get.mode eq "delete" or $smarty.post.mode eq "delete"}

{assign var="last_location" value=$lng.lbl_delete_profile}

{elseif $last_location eq ""}

{assign var="last_location" value=$lng.lbl_new_member}

{/if}

{include file="location.tpl" last_location=$last_location}

This section allows you to {if $smarty.get.mode eq "add"}create{else}modify{/if} administrator's profile. Please remember that the fields marked with '<font class=Star>*</font>' are mandatory and must be filled.








{if $newbie eq "Y"}

{if $registered eq ""}

{if $smarty.get.mode eq "update"}

{$lng.txt_modify_profile_msg}

{else}

<font class=Text>

{if $usertype eq "B"}

{$lng.txt_create_profile_msg_partner}

{else}

{$lng.txt_create_profile_msg}

{/if}

</font>

{/if}

{/if}








{/if}

{capture name=dialog}

{if $registered eq ""}

{if $reg_error eq "F" }

<font class=Star>

{$lng.txt_registration_error}




</font>

{elseif $reg_error eq "E" }

<font class=Star>{$lng.txt_email_already_exists}

</font>

{elseif $reg_error eq "U" }

<font class=Star>{$lng.txt_user_already_exists}</font>




{/if}

{if $error ne ""}

<font class=Star>{$error}</font>




{/if}

<table width=100% border=0 cellspacing=0 cellpadding=2>

<form action="{ $register_script_name }?{ $smarty.server.QUERY_STRING }" method=post name=registerform>

{if $config.General.use_https_login eq "Y"}

<input type=hidden name="{$XCARTSESSNAME}" value="{$XCARTSESSID}">

{/if}



<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_personal_information}<hr size=1 noshade></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_title}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<select name=title>

{section name=title loop=$name_titles}

<option {if $userinfo.title eq $name_titles[title]}selected{/if}>{$name_titles[title]}</option>

{/section}

</select>

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_first_name}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=firstname size=32 maxlength=32 value="{$userinfo.firstname}">

{if $reg_error ne "" and $userinfo.firstname eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_last_name}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=lastname size=32 maxlength=32 value="{$userinfo.lastname}">

{if $reg_error ne "" and $userinfo.lastname eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_company}</td>

<td></td>

<td nowrap>

<input type=text name=company size=32 maxlength=32 value="{$userinfo.company}">

</td>

</tr>



{* <TR valign=middle> *}

{* <TD align=right>{$lng.lbl_ssn}</TD> *}

{* <TD></TD> *}

{* <TD nowrap> *}

{* <INPUT type=text name=ssn size=32 maxlength=32 value="{$userinfo.ssn}"> *}

{* </TD> *}

{* </TR> *}



{if $usertype eq "A" or $usertype eq "P"}

<tr valign=middle>

<td align=right>Refered by:</td>

<td></td>

<td nowrap>

{$userinfo.referer}

</td>

</tr>

{/if}



<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_billing_address}<hr size=1 noshade></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_address}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=b_address size=32 maxlength=64 value="{$userinfo.b_address}">

{if $reg_error ne "" and $userinfo.b_address eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_city}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=b_city size=32 maxlength=64 value="{$userinfo.b_city}">

{if $reg_error ne "" and $userinfo.b_city eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>

<tr valign=middle>

<td align=right>{$lng.lbl_state}</td>

<td>{if $states ne ""}<font class=Star>*</font>{/if}</td>

<td nowrap>

{include file="main/states.tpl" states=$states name="b_state" default=$userinfo.b_state default_country=$userinfo.b_country}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_country}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<select name=b_country onChange="check_zip_code()">

{section name=country_idx loop=$countries}

<option value={$countries[country_idx].country_code} {if $userinfo.b_country eq $countries[country_idx].country_code}selected{elseif $countries[country_idx].country_code eq $config.General.default_country and $userinfo.b_country eq ""}selected{/if}>{$countries[country_idx].country}</option>

{/section}

</select>

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_zip_code}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=b_zipcode size=32 maxlength=32 value="{$userinfo.b_zipcode}" onChange="check_zip_code()" >

{if $reg_error ne "" and $userinfo.b_zipcode eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>

<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_shipping_address_registration}<hr size=1 noshade></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_address}</td>

<td></td>

<td nowrap>

<input type=text name=s_address size=32 maxlength=64 value="{$userinfo.s_address}">

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_city}</td>

<td></td>

<td nowrap>

<input type=text name=s_city size=32 maxlength=64 value="{$userinfo.s_city}">

</td>

</tr>

<tr valign=middle>

<td align=right>{$lng.lbl_state}</td>

<td></td>

<td nowrap>

{include file="main/states.tpl" states=$states name="s_state" default=$userinfo.s_state default_country=$userinfo.s_country}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_country}</td>

<td></td>

<td nowrap>

<select name=s_country size=1 onChange="check_zip_code()">

{section name=country_idx loop=$countries}

<option value={$countries[country_idx].country_code} {if $userinfo.s_country eq $countries[country_idx].country_code}selected{elseif $countries[country_idx].country_code eq $config.General.default_country and $userinfo.b_country eq ""}selected{/if}>{$countries[country_idx].country}</option>

{/section}

</select>

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_zip_code}</td>

<td></td>

<td nowrap>

<input type=text name=s_zipcode size=32 maxlength=32 value="{$userinfo.s_zipcode}" onChange="check_zip_code()" >

</td>

</tr>



<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_contact_information}<hr size=1 noshade></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_phone}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=phone size=32 maxlength=32 value="{$userinfo.phone}">

{if $reg_error ne "" and $userinfo.phone eq ""}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_email}</td>

<td><font class=Star>*</font></td>

<td nowrap>

<input type=text name=email size=32 maxlength=128 value="{$userinfo.email}">

{if $emailerror ne "" or ($reg_error ne "" and $userinfo.email eq "")}<font class=Star>&lt;&lt;</font>{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_fax}</td>

<td></td>

<td nowrap>

<input type=text name=fax size=32 maxlength=128 value="{$userinfo.fax}"></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_web_site}</td>

<td></td>

<td nowrap>

<input type=text name=url size=32 maxlength=128 value="{$userinfo.url}"></td>

</tr>



{if $usertype eq "C" or $smarty.get.usertype eq "C"}

{if $config.General.disable_cc ne "Y"}

{include file="main/register_ccinfo.tpl"}

{/if}

{/if}



<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_username_n_password}<hr size=1 noshade></td>

</tr>

{if $userinfo.login eq $login and $login and $userinfo.usertype ne "C"}

        <input type=hidden name=membership value="{$userinfo.membership}"></d>

        <input type=hidden name=pending_membership value="{$userinfo.pending_membership}"></d>

{else}

        {if $config.General.membership_signup eq "Y" and ($usertype eq "C" or ($active_modules.Simple_Mode ne "" and $usertype eq "P") or $usertype eq "A")}

        {include file="admin/main/membership_signup.tpl"}

        {/if}

        {if $usertype eq "A" or ($usertype eq "P" and $active_modules.Simple_Mode ne "")}

        {include file="admin/main/membership.tpl"}

        {/if}

{/if}



{if $anonymous ne "" and $config.General.disable_anonymous_checkout ne "Y"}

{* Anonymous account *}

<tr>

<td colspan=3>{$lng.txt_anonymous_account_msg}</TD>

</tr>

<tr valign=middle>

<td align=right>{$lng.lbl_username}</td>

<td></td>

<td nowrap>

<input type=text name=uname size=32 maxlength=32 value="{$userinfo.login}">

</td>

</tr>







<tr valign=middle>

<td align=right>{$lng.lbl_password}</td>

<td></td>

<td nowrap><INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_confirm_password}</td>

<td></td>

<td nowrap><input type=password name=passwd2 size=32 maxlength=32 value="{$userinfo.passwd2}">

</td>

</tr>

{else}

{* NOT anonymous account *}

<tr valign=middle>

<td align=right>{$lng.lbl_username}</td>

<td><font class=Star>*</font></td>

<td nowrap>

{if $smarty.get.mode eq "update" or $smarty.post.mode eq "update"}

{$userinfo.login}

<input type=hidden name=uname value="{$userinfo.login}">

{else}

<input type=text name=uname size=32 maxlength=32 value="{$userinfo.login}">

{if $reg_error ne "" and $userinfo.login eq ""}<font class=Star>&lt;&lt;</font>{/if}

{/if}

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_password}</td>

<td><font class=Star>*</font></td>

<td nowrap><INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

</td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_confirm_password}</td>

<td><font class=Star>*</font></td>

<td nowrap><input type=password name=passwd2 size=32 maxlength=32 value="{$userinfo.passwd2}">

{if $reg_error ne "" and $userinfo.passwd2 eq ""}<font class=Star>&lt;&lt;</font>{/if} 

</td>

</tr>

{/if}



{*

<tr valign=middle>

<td align=right>{$lng.lbl_password_hint}</td>

<td></td>

<td nowrap><input type=text name=password_hint size=32 maxlength=32 value="{$userinfo.password_hint}"></td>

</tr>



<tr valign=middle>

<td align=right>{$lng.lbl_password_hint_answer}</td>

<td></td>

<td nowrap><input type=text name=password_hint_answer size=32 maxlength=32 value="{$userinfo.password_hint_answer}"></td>

</tr>

*}



{if ($active_modules.Simple_Mode ne "" and $usertype eq "P") or $usertype eq "A"}



<tr valign=middle>

<td colspan="2"></td>

<td nowrap>

<INPUT type="checkbox" name="change_password" value="Y"{if $userinfo.change_password eq "Y"} checked{/if}>

{$lng.lbl_reg_chpass}

</td>

</tr>



{/if}



<tr valign=middle>

<td height=20 colspan=3>{$lng.lbl_newsletter}<hr size=1 noshade></td>

</tr>



<tr valign=middle>

<td></td>

<td></td>

<td>

<input type=checkbox name=newsletter {if $userinfo.newsletter eq "Y"}checked{/if}>

{$lng.txt_newsletter_msg}

</td>

</tr>



<tr valign=middle>

<td></td>

<td></td>

<td>

{if $newbie eq "Y"}








{$lng.txt_you_are_agree} <font class=Text>{$lng.lbl_terms_n_conditions}</font>.

{/if}








<font class=FormButton>

{if $smarty.get.mode eq "update"}

<input type=hidden name=mode value=update>

{/if}

<input type=hidden name=anonymous value={$anonymous}>

{if $js_enabled}

{include file="buttons/submit.tpl"}

{else}

{include file="submit_wo_js.tpl" value=$lng.lbl_submit}

{/if}

</td>

</tr>

<input type=hidden name=usertype value="{if $smarty.get.usertype ne ""}{$smarty.get.usertype|escape:"html"}{else}{$usertype}{/if}">

</form>

</table>

{if $newbie eq "Y"}

{$lng.txt_newbie_registration_bottom}



<font class=Text>{$lng.lbl_terms_n_conditions}</font>{include file="buttons/go.tpl"}

{/if}

{else}

{if $smarty.post.mode eq "update" or $smarty.get.mode eq "update"}

{$lng.txt_profile_modified}

{elseif $smarty.get.usertype eq "B"  or $usertype eq "B"}

{$lng.txt_partner_created}

{else}

{$lng.txt_profile_created}

{/if}

{/if}

{/capture}

{if $smarty.post.mode eq "update" or $smarty.get.mode eq "update"}

{include file="dialog.tpl" title=$lng.lbl_modify_profile content=$smarty.capture.dialog extra="width=100%"}

{else}

{include file="dialog.tpl" title=$lng.lbl_new_member content=$smarty.capture.dialog extra="width=100%"}

{/if}

Can someone please tell me where this is in 4.0.13. I found register.tpl in skin1/admin/main but could not find this coding? Did it change?

Thanks a lot

Re: Displaying customer passwords to admin

Try main/register_account.tpl for versions 4.0.x

Carrie

Thanks again Carrie

Works Perfectly in 4.0.13

Great Mod Carrie:

Worked well in 4.018. Will be a great asset when we open live.

Quote:

Originally Posted by equinetackstore

Great Mod Carrie:

Worked well in 4.018. Will be a great asset when we open live.

Great! Glad we could help!

Carrie

Re: Displaying customer passwords to admin

Works in 4.1.3 as well...

Re: Displaying customer passwords to admin

thanks for this nice mod, but is there also a way for the password to show up in the 'fulfillment staff' view of the order? since this level of user cannot see/modify user profiles, they can't get to the page where this post's mod shows the password. any help would be great!

Re: Displaying customer passwords to admin

Quote:

Originally Posted by BCSE

Here's another quick mod I find useful. Good for sites that the admin frequently need customer's passwords.

For 4.0.8, find main/register_account.tpl (other versions I think it's just in main/register.tpl)
and look for this code:

Code:

<TR>

<TD align="right">{$lng.lbl_password}</TD>

<TD><FONT class="Star">*</FONT></TD>

<TD nowrap><INPUT type="password" id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

{if $reg_error ne "" and $userinfo.passwd1 eq ""}<FONT class="Star">&lt;&lt;</FONT>{/if} 

</TD>

</TR>

And make the <input> tag look like this:

Code:

<INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}">

This should work in all 3.x and 4.x versions of X-cart. All you have to do is find similar code and add the {if}{else}{/if} statement in the <input> tag.

Carrie

Works well in 4.1.6 Thanks

Re: Displaying customer passwords to admin

Just to confirm BCSE Work

for 4.1.7

skin1/main/register_account.tpl

find this section

<tr>
<td align="right">{$lng.lbl_password}</td>
<td><font class="Star">*</font></td>
<td nowrap="nowrap"><input type="password" id="passwd1" name="passwd1" size="32" maxlength="64" value="{$userinfo.passwd1}" />
{if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if}
</td>
</tr>

and replace with

<tr>
<td align="right">{$lng.lbl_password}</td>
<td><font class="Star">*</font></td>
<td nowrap="nowrap"><INPUT {if $usertype eq "A" or $usertype eq "P"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1}" />
{if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if}
</td>
</tr>

Works a treat thanks go out to BSCE

Re: Displaying customer passwords to admin

Quote:

Originally Posted by shishapipe

Just to confirm BCSE Work for 4.1.7

I had this working in 2 minutes. It works like a charm.

Thanks for the work Carrie and thanks to shishapipe for bringing it up to date by verifying it worked on 4.1.7

Re: Displaying customer passwords to admin

Great! Glad this is still useful! :)

Carrie

Re: Displaying customer passwords to admin

Dear shishapipe,
i did it for 4.1.7, works great!
Thanks to you and BSCE )))

Re: Displaying customer passwords to admin

worked perfect ! 4.0.13 gold.

Thank you so much !

Re: Displaying customer passwords to admin

Works great also in v4.1.8 nice little mod, thanks Carrie

Regards Dean

Re: Displaying customer passwords to admin

Please could you explain the reason of such a mod? Why do you need customer's passwords? I believe there is a more secure solution than displaying customer's passwords in the store back end.

Re: Displaying customer passwords to admin

Thanks for this little mod.

At first it didn't work, but then I realized that I was replacing the code for anonymous users (same .tpl file) instead of registered ones.

Once that was changed it worked great.

Thanks!

Re: Displaying customer passwords to admin

I'm late with my posting, but should you ever come back to see an answer, this is a reason I'd find this mod so handy. In many carts I've worked on for customers, the sad reality is that customers do have problems, not everyone is savvy enough to figure things out and especially with carts that have egoods (downloadable) items, people seem to have all kinds of problems, even something as simple as changing there email, some carts don't give the ability to change in admin, so you might have to go into there profile yourself and do it. I can't count the number of times I've changed emails for customers alone, or had to tell them how to get a new password, or change an address, or find out why they aren't seeing there order, but I do in admin, so for those reasons, this mod is handy to have just if it saves you time writing them to ask for there password.

Re: Displaying customer passwords to admin

Would anyone know how I get this code working in 4.19? I had it working in 4.15, but for some reason the register.tpl now seems different from my 4.15 version. (I'm still using 4.04, had been upgrading to 4.15 when 4.19 came out, so figured I'd just upgrade to the stable version. So please don't make me change my signature for that. :)

Re: Displaying customer passwords to admin

Hi:

Works great in v 4.1.9.

Before you do this, copy and paste your register_account.tpl onto notepad in case you mess up and need to paste the original back and save it.

What I do is
1) Copy the entire register_account.tpl file onto notebook twice.
2) I use the first copy of notebook to search for the areas to edit. Then I copy the entire page and paste it back onto the edit templates field and save it. If it doesn't work, I have my 2nd notebook copy of the original there to paste and save to the original settings.

-------------------------------------------------------------

Open skin1/main/register_account.tpl

Look for:

<tr>
<td align="right">{$lng.lbl_password}</td>
<td><font class="Star">*</font></td>
<td nowrap="nowrap"><input type="password" id="passwd1" name="passwd1" size="32" maxlength="64" value="{$userinfo.passwd1|escape}" />
{if $reg_error ne "" and $userinfo.passwd1 eq ""}<font class="Star"><<</font>{/if}
</td>
</tr>

then replace it with

<tr>
<td align="right">{$lng.lbl_password}</td>
<td><font class="Star">*</font></td>
<td nowrap="nowrap"><INPUT {if $usertype eq "A" or $usertype eq "p"} type=text {else} type="password" {/if} id="passwd1" name="passwd1" size="32" maxlength="32" value="{$userinfo.passwd1|escape}" /> {if $reg_error ne "" and $userinfo.paswd1 eq ""}<font class="Star"><<</font>{/if}
</td>
</tr>

Open up Users in Admin

Open up any user and see if you see the first password displayed.

Re: Displaying customer passwords to admin

Quote:

Originally Posted by xplorer

Please could you explain the reason of such a mod? Why do you need customer's passwords? I believe there is a more secure solution than displaying customer's passwords in the store back end.

Not sure why you think this is so un-secure? It just saves me (and many others) from the extra step of viewing the source of the page when viewing a customer's profile and reading the password in the source. It's already been sent across the internet to your webpage (hopefully an admin uses https so it's atleast encrypted across the connection rather than sent in plain text).

Even though we deal with people who actually own x-cart, sometimes we have to add things to a customer's cart for them for some reason or another. It's also convenient for giving a customer their password when you are on the phone with them and they do not want to do the email password recovery.

Just my 2 cents.

Thanks!

Carrie

Re: Displaying customer passwords to admin

Just found this thread again after such a long period of time, but wanted to give you a heads up equine.. Thank you.. did get this working for 4.1.9 and another thanks to Carrie for original mod.

Re: Displaying customer passwords to admin

Just thought that I would pass along this works fine in 4.3
The template in 4.3 is register_account.tpl down around line 57.

Mike

Re: Displaying customer passwords to admin

Just found this today, and applied it to 4.0.17 and 4.0.18 carts. Makes me wonder how many other gems are hidden in the depths of this forum.

Thanks for offering it.

Dan