Can someone please check this Password code

[ozstar]

Hi,

 

I added Master Password and as far as I can recall it did work last week, anyway I go back to the shop today but when I tried the normal customer login with the correct pwd it said no match.

 

I asked for a new password, got it and tried it, but it also didn't work.

 

Yet...

 

When I log in with either of the Master Passwords it gets through.

 

What have I goofed up here on please?

 

 

oz <_<

 

This is the is logion php code in that area..

 

// Check that password is good - orig

 

// if (!tep_validate_password($password, $check_customer['customers_password'])) {

// $error = true;

// } else {

// $passwordgood = tep_validate_password($_POST['password'], $Qcheck->value('customers_password'));

 

// Changed to Master Password

if ($password == "pwdone" || $password == "pwdtwo") {

$passwordgood = 1;

} else {

$passwordgood = $passwordgood;

}

 

if (!$passwordgood) {

$error = true;

} else {

if (SESSION_RECREATE == 'True') {

tep_session_recreate();

}

[jdvb]

then I would guess you have a problem with:

$passwordgood = $passwordgood;

that code Is useless I guess, does not do anything.

if !isset($passwordgood) --> it will not be set. --> Thus error = true.