X-Cart forums

[dpcompany]

So, this has been an issue that has long been in my store, and today is the day I have decided to do something about it. Basically, I cannot change anything to do with a customer's profile from the admin side of things. Anytime I try to change something, the dialog informs me that the user's passwords do not match. It is important to mention that this only occurs if I am using IE (Chrome does not have this issue). Can someone please point me in the right direction here? Thanks y'all!

[kevinrm]

I have had similar issues using Safari. The problem turned out to be Safari's "AutoFill" feature which will automatically fill in username's and passwords. Check to make sure that any "AutoFill" feature is turned of whenever you use that browser to administer anything in X-Cart.

[dpcompany]

@kevinrm

Disabling autofill definitely works, however, this seems strange to me. I absolutely want (and need) to utilize autofill for many, many things. So, it seems very strange that I need to disable a feature of my internet browser in order to edit customer information on my site. Is there anyway to "exclude" those password fields from whatever is triggering the autofill on the admin section of my site?

Thanks again!

[kevinrm]

The problem is not X-Cart, it's the browser. If you visit a certain site, fill in a login and password, then allow the browser to remember that, it will. If you have to use multiple logins and email address such as you do when you administer a customer's account, fill out the PayPal module data, etc, etc, unfortunately the browser will automatically fill that data in and if you are not careful it will cause all kinds of problems.

I have yet been able to figure out how to make the email/ password autofill feature more selective within a site on Safari, it just throws the same thing no matter what page you visit on the site.

I would recommend that you install one browser and use that exclusively for admin of x-cart, and another browser for the rest of the web.

[dpcompany]

The problem is in X-Cart. Go to the template file located at /common_files/admin/main/register.tpl. Near the top, simply comment out the

{include file="check_password_script.tpl"}

portion of this template. Now, it won't trigger the password not matching error when editing anything in a customer's profile from the admin section.

[cflsystems]

You should not do this. The script check not only if the 2 passwords match but also if they comply with the password rules.
Even if you turn it off if password fields are send to the script they are checked on the server side.

What you can do is to set for username/email and password input fields "autocomplete" to off

https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion

[dpcompany]

@Steve, I actually tried the autocomplete="off" first (a number of different ways), but IE ignores this. Upon commenting out the {include file="check_password_script.tpl"}, ironically the system still does the password check function. So, if I am changing a password, it still has to match and meet the password requirements even with the script commented out.

[cflsystems]

The check_password_script.tpl works on browser side immediately while data is being entered in the form. The php script works after form submission and does the same checks.

By the way - https://bt.x-cart.com/view.php?id=45911

[dpcompany]

Thanks for the information Steve. As always, your contributions to this forum are invaluable!

[cherie]

I know this problem existed in older versions of Chrome but has been fixed. I suspect the same for Safari. Would be interesting to know which browser versions triggered this.