View Single Post
  #18  
Old 02-13-2013, 04:37 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: X-Cart 4.5.5 released

Quote:
Originally Posted by seyfin
Quote:
Some errors occurred when trying to save profile data:
The password must be at least 7 characters long and must contain both alphabetic and numeric characters. It should not be the same as your username.

Do you enter your new password which meets the above requirements? It is for security reasons - no simple passwords are allowed.

Am I reading this correctly: 4.5.5 requires 7 character passwords for customers?
What happens if an upgraded customer uses their old "simple" password?
We MUST disable this "feature".

Here's my gripe on this:
A user account on an x-cart store is not the same as a bank. There is simply NO NEED for "secure passwords" for customers since the data it's protecting is only name, email, address and things they like to purchase. IF you require that my customer must change their password -- you're going to PISS THEM OFF. And therefore piss me, the merchant, off as well.

WHY THE F did you change this without an option to turn it off at the admin?

Yes, I am upset about this. This needs an option to turn it off. Immediately.

You guys are not thinking like merchants.
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4