Password on "Resend Sign up info" is Encrypted?

Discussion in 'aMember Pro v.4' started by aknetwork, Feb 6, 2012.

  1. aknetwork

    aknetwork Member

    Joined:
    Jul 30, 2010
    Messages:
    52
    Hello,

    When I resend sign up info to my members, they get their password as ALL weird characters: $P$BziaH9dzdW (for example)

    I checked the email template and I have it as Plain Text and the command is: Your Password: %user.pass%

    What is wrong?

    Thanks.
  2. alex

    alex aMember Pro Customer Staff Member

    Joined:
    Jan 24, 2004
    Messages:
    6,021
    aMember does not store password in plaintext. It is impossible to resend it, password can be only reset.

    Your signup e-mail template shall not contain %user.pass% variable - it is always a password hash.
    You can enable "Registration E-Mail" at aMember CP -> Setup -> E-Mail and insert %pass% variable. That is only the place where the plaintext password is available - immediately after the user signup.
  3. agelinas

    agelinas New Member

    Joined:
    May 11, 2010
    Messages:
    12
    Thanks Alex for the explanation about the use of the %user.pass% variable and password encryption. I used the variable in automatic Email Notifications and members who received them and tried to login using the "encrypted password" were very frustrated. I should have tested these emails, but didn't because I thought they would work like in Amenber v.3.

    Have a great day!
  4. davidm1

    davidm1 aMember User & Partner

    Joined:
    May 16, 2006
    Messages:
    4,437
    Perhaps this should be removed as an option then?

    David
  5. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Yes you right.
    I've removed it.
  6. stevenjohn

    stevenjohn Member

    Joined:
    Nov 9, 2006
    Messages:
    40
    This is good for security - but not so good for admin access. In v3 we used the plain text passwords so we could login to client accounts to check all was working ok.

    Is there anyway to be able to login as a client into our system? I really need to check its working well fr them without disturbing them to ask for their password...?

    Thanks, Steve
  7. robw

    robw CGI-Central Partner

    Joined:
    Dec 18, 2007
    Messages:
    287
    @stevenjohn - yes, in aMember 4 you have a 'login as user' option which appears to the right of their login name in 'User Info'.
  8. stevenjohn

    stevenjohn Member

    Joined:
    Nov 9, 2006
    Messages:
    40
    D'oh! I just ran back to this thread as we'd just found that.... there's no blushing smiley to insert...

    But thanks Rob, appreciate you letting me know.

    I'll go sit in the corner now :))
  9. robw

    robw CGI-Central Partner

    Joined:
    Dec 18, 2007
    Messages:
    287
    No worries :p

Share This Page