Defult Password is still set

demosthenes705

I know Trish was looking for some code to see if the user was still using the original password. I was wondering where he would like that code because I got something that should work. I mean it works for me.

if he wants, he can email me at demosthenes705 at gmail or just ask me to post it here

trisweb

That'd be a good idea... I may stick it into the 1.0.8 release just to be safe.

demosthenes705

here you go

find `<?php` (line 1)
add after
`session_start();`

Find
`if (!zp_loggedin()) { /* Display the login form and exit. */`

Add After:

`if (isset($_GET['ignore'])){<br />
$_SESSION['ignoreNormalPassword'] = true;

}

// Display the login form and exit.

if ($_SESSION['ignoreNormalPassword'] != true){

if (zp_conf(adminpass) == '1234'){

echo 'You are currently using the defult password. This is insecure because many people know this password. It is recomended to change it. If you want to continue click here Continue Anyways

If you change it, just refresh this page.';

}

}`

This is how I would do it, if you want to change it. And I don't care for credit, but if you want to give credit its Chris S.

trisweb

This made it in the 1.0.8 release, albeit in a heavily modified form. Thanks!