3

I'm using Magento CE 1.9.2.3 and enable email confirmation for registration. Email is sent as normal, but when I click the link, it always fails. The link is like this

https://domain.com/customer/account/confirm/?id=10&key=1fdc9eb4eb591cfaef5878b907348587

Later on, I found out that under customer_entity_varchar table, Magento stores the plain text (from the password) instead of the hash string, under attribute_id 16 (confirmation). When I change this plain text to the hash string, it works.

My question is, why Magento stores the plain text whilst email the hash string?

Improve this question
1
  • Can you share the solution? We have the same issue. Thx.
    – user39878
    Commented May 17, 2016 at 13:54

1 Answer 1

Reset to default
1

Never mind. The culprit was Webkul Vendor Attributes extension which overwrite Magento default values and stored password and password_confirmation in plain text. Really really dangerous!

Improve this answer
1
  • No there is no issues with webkul vendor attribute extension as we never overwrite the core default values also all those attribute are driven by magento only still have any query please raise a concern at webkul.com/ticket . thanks
    – webkul
    Commented Feb 12, 2016 at 12:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.