Automatically Use Zip Code For The Password?

[walkman]

We've had people tell us they bailed on a order because of the password prompt. I think it makes them afraid they're being scammed. Probably because they think they're being asked for an existing password.

 

Does anyone see any problem with having the password automatically use the customer zip code instead of prompting for a password? I'm thinking there is no real security risk since no credit card information is available on-line even if someone could guess a valid email / zip code combination.

 

Or has anyone made a similar change?

[walkman]

Just to let people know in case anyone wants to make a similar change in the future, this mod turned out to be quite easy.

 

I just had to change create_account.php to

 

1) assign $passcode & $confirmation the value of the zipcode

 

2) comment out the code that tests to see if the email address already exists

 

3) change the html body so that the password block does not appear

 

 

I then changed the wording on account check-in to let the user know that their password is their zip code unless they have changed it.

 

 

The mod is much less confusing for the user. It also has the advantage that if the user creates a new order in the future they will not get hung up trying to figure out how to get logged in.

 

I already have a very modified version of the program as I'd created my own version of "guest" checkout without an account, so I'm not posting any code.