Jump to content


Corporate Sponsors


Latest News: (loading..)

- - - - -

reset.php for changing admin paswword isnt working


10 replies to this topic

#1 sash_007

  • Community Member
  • 12 posts
  • Real Name:Neophytech
  • Gender:Male

Posted 12 March 2010, 05:46

Hello friends,
I have forgot my store admin password for that i have used this addon http://addons.oscommerce.com/info/5857
but it failed before that i tried this method refeered in this thread

http://forums.oscommerce.com/index.php?showtopic=283912&st=0&gopid=1492607&#entry1492607

Quote

If you go to your administrators table in phpmyadmin, you will see your user name and hashed password. Copy them to a text editor - so you can put them back if need be - then delete them from the administrators table. If it works out, the next time you access your admin, it should ask you to input a new user name and password.


#2 mdtaylorlrim

  • Community Member
  • 2,497 posts
  • Real Name:Mark
  • Gender:Male

Posted 12 March 2010, 12:49

View Postsash_007, on 12 March 2010, 05:46, said:

Hello friends,
I have forgot my store admin password for that i have used this addon http://addons.oscommerce.com/info/5857
but it failed before that i tried this method refeered in this thread

http://forums.oscommerce.com/index.php?showtopic=283912&st=0&gopid=1492607&#entry1492607
Can you describe what the password entry box looks like? Is it a form on an osC page or is it a pop up window?
Avoid the most asked question. See How to Secure My Site and How do I...?

#3 sash_007

  • Community Member
  • 12 posts
  • Real Name:Neophytech
  • Gender:Male

Posted 13 March 2010, 12:47

View Postmdtaylorlrim, on 12 March 2010, 12:49, said:

Can you describe what the password entry box looks like? Is it a form on an osC page or is it a pop up window?


hello i uploaded the reset.php to http://www.webdesigncut.com/store then i run it and then went to admin and i see this screen [IMG]http://img28.imageshack.us/img28/6488/57736601.jpg[/IMG]

#4 mdtaylorlrim

  • Community Member
  • 2,497 posts
  • Real Name:Mark
  • Gender:Male

Posted 13 March 2010, 12:52

View Postsash_007, on 13 March 2010, 12:47, said:

hello i uploaded the reset.php to http://www.webdesigncut.com/store then i run it and then went to admin and i see this screen
And what happens now when you enter a username and password here?
Avoid the most asked question. See How to Secure My Site and How do I...?

#5 FIMBLE

  • Community Member
  • 6,567 posts
  • Real Name:Nic
  • Gender:Male

Posted 13 March 2010, 14:18

The reset password script will let you know if you are using htaccess over the normal log in.

Check that fopen() is set to true, to test make a php.ini file and add allow_url_fopen = On; to it, uplod it to your admin folder and see if this helps.


Possibly it will not but it does cross off one of the items on the list of what it could be. Do you have any other problems with data entry?
Nic
Sometimes you're the dog and sometimes the lamp post

My Contributions

#6 sash_007

  • Community Member
  • 12 posts
  • Real Name:Neophytech
  • Gender:Male

Posted 14 March 2010, 08:23

View Postmdtaylorlrim, on 13 March 2010, 12:52, said:

And what happens now when you enter a username and password here?

after that when i tried to login
it says
Error: Invalid administrator login attempt.

#7 Jan Zonjee

  • Team Member
  • 7,001 posts
  • Real Name:Jan Zonjee
  • Gender:Male
  • Location:the Netherlands

Posted 14 March 2010, 09:19

View Postsash_007, on 14 March 2010, 08:23, said:

after that when i tried to login
it says
Error: Invalid administrator login attempt.
Most likely this has to do with the fact that you get a 302 message (redirection to site without www) when going to that admin directory (name of site edited out):
curl -v http://www.yoursite.com/store/admin/
* About to connect() to www.yoursite.com port 80 (#0)
*   Trying 69.167.137.119... connected
* Connected to www.yoursite.com (69.167.137.119) port 80 (#0)
> GET /store/admin/ HTTP/1.1
> User-Agent: curl/7.16.3 (powerpc-apple-darwin9.0) libcurl/7.16.3 OpenSSL/0.9.7l zlib/1.2.3
> Host: www.yoursite.com
> Accept: */*
> 
< HTTP/1.1 302 Moved Temporarily
< Date: Sun, 14 Mar 2010 09:12:06 GMT
< Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
< X-Powered-By: PHP/5.2.11
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Set-Cookie: osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650; path=/store/admin/
< Location: http://yoursite.com/store/admin/login.php?osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650
< Content-Length: 0
< Content-Type: text/html
< 
* Connection #0 to host www.yoursite.com left intact
* Closing connection #0
Note the redirect to the site without www prepended....

And of course it is a good idea to rename the admin directory to something less obvious and add .htaccess protection on top of that.

#8 maydaohio

  • Community Member
  • 4 posts
  • Real Name:Mayda Sanchez
  • Gender:Female
  • Location:Ohio, United States

Posted 15 March 2010, 23:35

View PostJan Zonjee, on 14 March 2010, 09:19, said:

Most likely this has to do with the fact that you get a 302 message (redirection to site without www) when going to that admin directory (name of site edited out):...
Note the redirect to the site without www prepended....

And of course it is a good idea to rename the admin directory to something less obvious and add .htaccess protection on top of that.

Jan, Can you post a specific resolution. I am getting the same error after applying the reset.php. It allows me to create administrator but then the login does not work. Thanks, Mayda

#9 maydaohio

  • Community Member
  • 4 posts
  • Real Name:Mayda Sanchez
  • Gender:Female
  • Location:Ohio, United States

Posted 16 March 2010, 04:21

This solution by BryceJr worked for me. I seemed to have a very similar problem.
post link

#10 sash_007

  • Community Member
  • 12 posts
  • Real Name:Neophytech
  • Gender:Male

Posted 16 March 2010, 05:49

View PostJan Zonjee, on 14 March 2010, 09:19, said:

Most likely this has to do with the fact that you get a 302 message (redirection to site without www) when going to that admin directory (name of site edited out):
curl -v http://www.yoursite.com/store/admin/
* About to connect() to www.yoursite.com port 80 (#0)
*   Trying 69.167.137.119... connected
* Connected to www.yoursite.com (69.167.137.119) port 80 (#0)
> GET /store/admin/ HTTP/1.1
> User-Agent: curl/7.16.3 (powerpc-apple-darwin9.0) libcurl/7.16.3 OpenSSL/0.9.7l zlib/1.2.3
> Host: www.yoursite.com
> Accept: */*
> 
< HTTP/1.1 302 Moved Temporarily
< Date: Sun, 14 Mar 2010 09:12:06 GMT
< Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
< X-Powered-By: PHP/5.2.11
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Set-Cookie: osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650; path=/store/admin/
< Location: http://yoursite.com/store/admin/login.php?osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650
< Content-Length: 0
< Content-Type: text/html
< 
* Connection #0 to host www.yoursite.com left intact
* Closing connection #0
Note the redirect to the site without www prepended....

And of course it is a good idea to rename the admin directory to something less obvious and add .htaccess protection on top of that.
can you please explain clearly what should be done step by step as i am newbie in php in oscommerce
i have a redirect of my site non www to www

#11 sash_007

  • Community Member
  • 12 posts
  • Real Name:Neophytech
  • Gender:Male

Posted 16 March 2010, 06:02

View Postmaydaohio, on 16 March 2010, 04:21, said:

This solution by BryceJr worked for me. I seemed to have a very similar problem.
post link
your method didnt worked