Jump to content

Customer password recovery


Guest peetiepie

Recommended Posts

Guest peetiepie

We need some help in this glitch. When a customer forgets their own password, CC3 is supposed to help them recover that password, but in our instance, it is not doing that. It will not give us the forgotten password. Can anyone shed some light on why this might be happening in our software?? Thanks in advance.

Link to comment
Share on other sites

If CC has implied that a password can be recovered, then it is a misinterpretation. Passwords are one-way scrambled. To test if a password matches, the entered password is scrambled the same way and the two scrambles are compared. If the scrambles match, then the entered password must be correct.

Using CC's "Forgot Password", CC will autogenerate a new password and email it to the customer's email on file. It will also one-way scramble it and save that scramble in the customer's record.

Link to comment
Share on other sites

Guest peetiepie

If CC has implied that a password can be recovered, then it is a misinterpretation. Passwords are one-way scrambled. To test if a password matches, the entered password is scrambled the same way and the two scrambles are compared. If the scrambles match, then the entered password must be correct.

Using CC's "Forgot Password", CC will autogenerate a new password and email it to the customer's email on file. It will also one-way scramble it and save that scramble in the customer's record.

Unfortunately, we can't even get any sort of reply from CC, autogenerated or otherwise. The customer's email is on file and they receive nothing. Is that possible?

Link to comment
Share on other sites

The way I've overcome this is as follows.

Create a dummy account with a simple password, ie 12345

Launch PHP admin (if you have access) and open the table "Customers"

Browse this table and find the dummy customer you just created.

Under the column "password" highlight and copy the haxadecimal string.. something like (123FF4DEABC33CC5A77D)

Paste this string to a text file for future reference.

Now browse the same column and find your customer.

Overwrite his password string with the one you copied from the dummy account, and execute.

Your customer, now has the password "12345", so he should now be able to log in and change it.

No doubt there is a better way, and someone will be along to explain.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...