Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Magmi Login fails after SUPEE-11219 update? #590

Open
frostitution opened this issue Oct 29, 2019 · 3 comments
Open

Magmi Login fails after SUPEE-11219 update? #590

frostitution opened this issue Oct 29, 2019 · 3 comments

Comments

@frostitution
Copy link

Magento's latest update (1.9.4.3) made some changes to passwords and how they are stored (minimum length, hash related changes). One of our users changed their password and has since been unable to login to Magmi. My password has remained unchanged prior to the update and I can login just fine.

Can anyone else confirm this issue or is this just user error?

@bandm
Copy link

bandm commented Nov 19, 2019

Just to add to this, I'm having the same problem as above.

Having looked at the password field in the DB the structure of the hash is completely different to what is being checked against in the login script.

== New Password Structure ==

XXXXXX.XXXXXXXXXXXXXXXXXXXX.XXXXXXXXXXXXXXXXXX.X.XXXXXXXXX

== Old Password Structure ==

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

== Magmi Password Validation Function ==

private function validatePass($hash,$pass){
    #first try : standard CE magento hash

    $hash = explode(":",$hash);
    $cecheck = md5($hash[1] . $pass);
    $eecheck = hash('sha256',$hash[1] . $pass);
    $valid=($cecheck == $hash[0] || $eecheck== $hash[0]);

    return $valid;
}

Looks like there is nothing to run the explode on anymore.

Is there any timeline of a fix or a work around? :)

@roshan-kaushish82
Copy link

I am also getting the same issue.. can anyone help on this please?

@mlaurense
Copy link

Quick 'n' dirty fix. Edit inc/magmi_auth.php:

At the top:
require_once('../../app/Mage.php');

Change public function authenticate() so it contains the following:

Mage::app();
$user = Mage::getModel('admin/user');
return $user->authenticate($this->user, $this->pass);

This will allow you to login.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants