View Single Post
  #41  
Old 10-27-2013, 12:06 PM
  cflsystems's Avatar 
cflsystems cflsystems is offline
 

Veteran
  
Join Date: Apr 2007
Posts: 14,201
 

Default Re: X-Cart 4.6.1 released

Now this has been reported before. It has been logged in the bugtracker. Long time ago. And it still exists which means it was never ever considered by QT for a fix

When security settings in admin are set to require password change every so many days this is what happens when the day comes.
1. Try to login to admin as normal - we don't know yet that password change is required.
2. Page is reloaded showing the exact same page as normal login and this message displays - "You should login before using "Change password" facility". (So what did I just do - I logged in right....)
3. So you enter the same login again, no other way around, and next screen is "change password" in admin with an error message "Error: You must change the password before you proceed."
4. After password is changed I am logged in automatically

QT does this sounds correct to you? If this is a feature (coded that way) please - take out that feature
After I "login" - I provide my username/password why am I told I should login before I can change password? I was not trying to change password but to login.

How this should work
1. Normal login
2. Try to login and change password screen should show with a message "You must change password first"
3. Change password
4. Here you can debate on this - either a message "password successfully changed" with login screen (preferable) OR same message with auto login

And when/if changing this to make it work correct please consider that admin and customer sides use the same code and files so if you fix the admin don't break the customer side
__________________
Steve Stoyanov
CFLSystems.com
Web Development
Reply With Quote