30 replies to this topic

[photofxplus]

As per request this topic is in regards to my contribution FX_Email_Verification.
This contribution attempts to prevent bogus email address's upon creation of new accounts. Once an account is created the customer is emailed a password which will allow them to log in. The password fields on the Create Account page are dimmed and prepopulated with a randomly created password. These fields cannot be edited and/or selected by the customer. The store owner has the option to display these password fields or not to display them on the Create Account page.

The contribution includes and Admin panel addition under customers. This selection titled 'Verify Customers' allows the store owner to view which accounts have been created and not logged into. After creating a new account, even using a bogus email address, the information is still written to the database. 'Verify Customers' will display all customers that have not logged into their account - within a set time period. This set time period can be edited - default value is 30 days which means that anyone that has created the account and has not logged in after 30 days after will be displayed with a status indicater of red in the 'Password Expired' column. One other useful date that can be edited is the 'account verification start date', all customers before this date will not display on the 'Verify Customers' page. Reason - that account has already been created, bogus email or not.
Customer accounts can be deleted from the 'Customer Verify' page.

Installation is simple, just copy the catalog folder over your existing. No database changes..

The contribution includes a read_me.txt which explains more specifics concerning editing variables such as where they are and values.

Please post any suggestions, comments, and/or issues in this topic.

[photofxplus]

FX_Email_Verification v4.0 just posted. This version offers complete user editing of Settings from the Admin Panel. Previous versions required manual editing in the code pages for the following settings:
1. Account verification date - this setting allows the store owner to set the date that all customers whom have created an account before or after to be displayed or not on the customer verification page.
2. Password length - allows the store owner to set the length of the emailed password in characters.
3. Password expiry time in days - displays status of account if account has not been logged into from account creation date to now.
4. Display password text boxes on Create Account page - by request, store owner has the option of displaying password text boxes on the Create Account page.

This version now writes to the databse table 'configuration' with the four constants named above.

[scorp]

Works great, but how can the email sent to the customer reflect now many days the admin has set there password for.

The email reads
The return link above is temporary and will expire in 24 minutes this is nolonger the case. Using the link prior to expiration will restore any items you may have had in your shopping cart.

With the time now set to days this doesnt apply.

It would be nice for the email to match the time set in the admin ie Your password expires in (what admin set it as) days.

Edited by scorp, 15 April 2008, 13:52.

[photofxplus]

scorp, on Apr 15 2008, 08:51 AM, said:

Works great, but how can the email sent to the customer reflect now many days the admin has set there password for.

The email reads
The return link above is temporary and will expire in 24 minutes this is nolonger the case. Using the link prior to expiration will restore any items you may have had in your shopping cart.

With the time now set to days this doesnt apply.

It would be nice for the email to match the time set in the admin ie Your password expires in (what admin set it as) days.

The expiration of the link details how long the session id should last. If the customer had any products in the cart before creating the account then - when they return the cart should still be there.
That was on previous versions which included the session id in the link. v4.0 just has a link back to the log-in page because I found out that including the session id was not neccessary to restore cart contents.

But you are right - that part of the email should be changed - worded better - and your suggestion to include a password expiration date would be nice.
I will add that in the next update.

You could do it yourself:
Page 'catalog/includes/languages/english/create_account_redirect.php' Line 36
define('EMAIL_NOTE', SEPERATER . "\n" . 'The return link above is temporary and will expire in ' . defined('ACCOUNT_PASSWORD_EXPIRY') ? ACCOUNT_PASSWORD_EXPIRY : 30; . ' days.' . "\n\n");


Thank you.

[scorp]

photofxplus, on Apr 15 2008, 03:09 PM, said:

Page 'catalog/includes/languages/english/create_account_redirect.php' Line 36
define('EMAIL_NOTE', SEPERATER . "\n" . 'The return link above is temporary and will expire in ' . defined('ACCOUNT_PASSWORD_EXPIRY') ? ACCOUNT_PASSWORD_EXPIRY : 30; . ' days.' . "\n\n");
Thank you.

Thx will try it

Edited by scorp, 15 April 2008, 15:05.

[photofxplus]

I have just posted an update to address the above issue. Thank you for your comments scorp..
FX_Email_Verification_4.0-Update_a

http://addons.oscommerce.com/info/5678

Edited by photofxplus, 15 April 2008, 15:16.

[scorp]

photofxplus, on Apr 15 2008, 04:08 PM, said:

I have just posted an update to address the above issue. Thank you for your comments scorp..

i cant get the line to work keeps failing on line 36.

ive tryed
define('EMAIL_NOTE', SEPERATER . "\n" . 'The return link above is temporary and will expire in ' . defined('ACCOUNT_PASSWORD_EXPIRY') ? ACCOUNT_PASSWORD_EXPIRY : 7; . ' days.' . "\n\n");

tryed without the ; after 7 could someone have a look at this im sure it just a / or something in the wrong place.

[photofxplus]

Yeah I tried it after posting and could not get it to work either..
sorry
Try the update.

[scorp]

scorp, on Apr 15 2008, 04:17 PM, said:

i cant get the line to work keeps failing on line 36.

ive tryed
define('EMAIL_NOTE', SEPERATER . "\n" . 'The return link above is temporary and will expire in ' . defined('ACCOUNT_PASSWORD_EXPIRY') ? ACCOUNT_PASSWORD_EXPIRY : 7; . ' days.' . "\n\n");

tryed without the ; after 7 could someone have a look at this im sure it just a / or something in the wrong place.

Parse error: syntax error, unexpected ';' in /home/sites/my_site/public_html/catalog/includes/languages/english/create_account_redirect.php on line 36

[photofxplus]

OK,
I uploaded an update - but if you want to do it maually then change the file:
At the top find this:
// Sets the session expire time to be displayed in minutes for the email
if (isset($SESS_LIFE)) {
$sess_minutes = $SESS_LIFE/60;
} else {
$sess_minutes = '-contact store owner for details-';
}

Put this under it:
if (defined('ACCOUNT_PASSWORD_EXPIRY')) {
$days = ACCOUNT_PASSWORD_EXPIRY;
} else {
$days = '30';
}

Then change Line 36 to this:
define('EMAIL_NOTE', SEPERATER . "\n" . 'The password above is temporary and will expire in ' . $days . ' days.' . "\n" . 'Using the return link above within ' . $sess_minutes . ' minutes will restore any items you may have had in your shopping cart.' . "\n\n");

[scorp]

scorp, on Apr 15 2008, 04:29 PM, said:

Parse error: syntax error, unexpected ';' in /home/sites/my_site/public_html/catalog/includes/languages/english/create_account_redirect.php on line 36

Forget my last msg you must of posted just before your post about the update works fine with the update.

[henryfabu]

Hello, I instaled that contrib (version 3.0) and it works great.
It would be very nice if the link in the email would point to account_password.php in order that customers could easily change their password, because I think is it difficult to some customers to change their password because they are not familiar with oscommerce stores, and they can forget it.

That could be perfect is if that link could point to a site where you only need to enter the new password, instead entering before the old one.

Thank you very much

[photofxplus]

You should download the latest version 4.0 plus the update 4.0-Update_a instead.. You can install directly over 3.0.

I could do that - have the link go to change password instead - however the customer would still have to log on using the generated password first in order to access the page.

If you want you can change the link in the email yourself.
Page: catalog\create_account.php Around Line 279
$fx_link = HTTP_SERVER . DIR_WS_HTTP_CATALOG . FILENAME_LOGIN;
Change to:
$fx_link = HTTP_SERVER . DIR_WS_HTTP_CATALOG . FILENAME_ACCOUNT_PASSWORD;

[henryfabu]

Ok, I will try it. I knew that customers have to log on before, but I think is better if just after logging in, you see the change password page.
I will install version 4.0, but because I have other contributions that modify create_account.php I am going to edit only the changes between v3 and v4, as I did when I installed version 3.

Thank yoy very much, it is just the contribution I was looking for.

Edited by henryfabu, 15 April 2008, 16:43.

[photofxplus]

Dont forget the update_a.. Install this as well. Its just one page for the language file.

[scorp]

If you want you can change the link in the email yourself.
Page: catalog\create_account.php Around Line 279
$fx_link = HTTP_SERVER . DIR_WS_HTTP_CATALOG . FILENAME_LOGIN;
Change to:
$fx_link = HTTP_SERVER . DIR_WS_HTTP_CATALOG . FILENAME_ACCOUNT_PASSWORD;
[/quote]

I think this is a better way, least the customer can change the password after they have signed in. Not many people would go to my account and change it.
This way the customer has it forced apon them to change it if they wished.

Edited by scorp, 15 April 2008, 17:03.

[photofxplus]

scorp, on Apr 15 2008, 12:02 PM, said:

I think this is a better way, least the customer can change the password after they have signed in. Not many people would go to my account and change it.
This way the customer has it forced apon them to change it if they wished.

OK guys - Ill put it in the contrib and upload a complete pckg.
Thanks for the input..

Better yet - I will add the option to the Settings box in the Admin Panel..

[scorp]

photofxplus, on Apr 15 2008, 06:41 PM, said:

Better yet - I will add the option to the Settings box in the Admin Panel..

You work like a god full respect goes to you i wish i had a webmaster like you.

[henryfabu]

I was updating to version 4.

Then I will wait until next version.

Thank you!

[photofxplus]

I have just posted the new version FX_Email_Verification 4.0a

The newer version address's the requested option of the email link in the password email sent to the customer. Store owner now has the option of choosing to redirect customer to the password change page or the default page. This option is added to the Settings box in the Admin Panel.

Numerous other editing has been performed - Register Globals enhancements - and a number of changes to the create_account page.

Thanks to all the above for the suggestions.