Which admin contrib am I using

[newtech]

I installed OSCommerce over 3 years ago and I cannot remember what I used for the administration contribution.

I currently have 3 admin users and I need to change their passwords but cannot figure out how to do it. Do not see an option.

And there is no 'forgot password' option.

 

 

I thought I used the admin user levels contrib but my database does not look like it would.

 

I only have 4 fields in my administrator database table:

IS, SName, SPassword, sGUID (encrypted password), sData

 

And there are no other administrator tables.

 

I thought about installing another contrib, but I am afraid it will conflict with the one I am using and I will not be able to log in at all.

 

I have attached an image of the login page.

 

Anybody have any suggestions of how I can control the usernames and passwords?

[web-project]

this is new version of osCommerce Online Merchant v2.2 Release Candidate 2a installed by default, but if you are using older oscommerce you can install the following module:

http://addons.oscommerce.com/info/1359

this module with extra permission level for admins.

[newtech]

Ok, I have the default admin. I cannot find anywhere where I can add or edit administrators.

So, I have gone to the oscommerce site to find documentation and I cannot find anywhere on the site a manual. I read it is suppose to be under the solutions tab but I still cannot find a manual.

 

I must be blind in one eye and can't see out of the other, so can you give me the URL for the manual.

[spooks]

http://www.oscommerce.info/kb/osCommerce

[newtech]

Thanks for the manual link.

I have reviewed the manual and I still do not see any info on how you can edit/delete/add administrators with the default admin.

[spooks]

Check what version of osC yuor using (look in tips if u need to know how to find version)

 

try going to:

 

my_site/admin/administrators.php if you have rc1 or greater.

 

 

[newtech]

osCommerce 2.2-MS2

There is no admin/administrators.php

[spooks]

OK, so you don't have he default admin login, as it does not exist in MS2, so you need to give more clues or search to find what contrib u used, your pic looks like a standard rc login panel.

 

 

Due to security issues, u would be better upgrading to rc2a anyway http://addons.oscommerce.com/info/6654

 

You also need to look at improving admin security anyway http://www.oscommerce.com/forums/index.php?showtopic=340995

 

And you will also need to secure your site to stop all the hacking thats going around http://www.oscommerce.com/forums/topic/313323-how-to-secure-your-site/

 

Sorry, I hope you did'nt have anything planned for the weekend!!

[newtech]

I have tons of contribs and edits to this site. It is not feasible at this time for me to upgrade. I am trying to take other steps to slow down the hacking.

 

One step I am trying is not working right-renaming the admin folder:

I have changed the folder name of my admin folder. Everything is working fine until I click 'Confirm Order'. The order goes through fine, but the sending of email invocie is not working because it shows the wrong path.

 

Here is the error:

PHP Warning: require(/html/admin/includes/languages/english/invoice.php) [function.require]: failed to open stream: No such file or directory in /html/includes/modules/email_invoice/email_invoice.php on line 30, referer: https://www.domain.c...onfirmation.php

 

The path above to the admin folder is showing the old folder name of admin.

 

I have done the following in newadminfolder/includes/configure.php so why is the path above showing admin instead of newadminfolder?

define('DIR_WS_ADMIN', '/newadminfolder/'); // absolute path required

define('DIR_FS_ADMIN', '/newadminfolder/'); // absolute pate required

define('DIR_WS_HTTPS_ADMIN', '/var/www/public_html/ahaplace/html/newadminfolder/');

 

Here is what is strange:

I can keep the above settings in configure.php and change the admin folder name back to admin and then everything works fine. That is telling me that email_invoice.php is not looking at the configure.php file for the path even though the code in email_invoice.php shows it should:

require(DIR_FS_ADMIN . "/" . DIR_WS_LANGUAGES . $language . "/" . FILENAME_ORDERS_INVOICE);

[newtech]

I was able to find an old backup of my files. I am using admin_login contrib, that is why I could not find any files in admin to control passwords. The contrib has you create usernames and password in the sql before you run the sql. Once you run it the passwords are encrypted. Thus you are not able to edit usernames or passwords without deleting the table and running the sql again.

[newtech]

I have tons of contribs and edits to this site. It is not feasible at this time for me to upgrade. I am trying to take other steps to slow down the hacking.

 

One step I am trying is not working right-renaming the admin folder:

I have changed the folder name of my admin folder. Everything is working fine until I click 'Confirm Order'. The order goes through fine, but the sending of email invocie is not working because it shows the wrong path.

I had to change [catalog]/includes/local/