Need help

[Madhosh]

All,

I need an urgent help. I can't login to my backend shop. I tried to reset my password but I don't get my new password anymore.

 

[DRMasterChief]

Hi, this can be done super simple in Database,  do you have phpMyAdmin login?  I hope so...  just use the simple option...:

Select your thirty bees database in phpMyAdmin
Locate the _employee table  (the prefix might vary, e.g., tb_employee).
Click Browse and find your user account row, then click Edit.
Under the passwd column, change the Function dropdown to MD5.
In the Value field, type your new password.
(the shop will now turn your new password automatically in a MD5 hash)
Click Go at the bottom right to save changes.
You can now log in to the admin panel.

and you can also find help here:  

and 

 

 

[datakick]

The approach described by @DRMasterChief will not work on newer versions of thirty bees, intentionally.

You can check if your tb_employee table contains column signature - if the column exists, you can't change the email/password in the table manually. You also need to change the value of column signature, but for that you need to know a secret that's not available to mysl.

This mechanism exists to prevent attackers to elevate sql injections into complete access. If your store contained SQL-injection vulnerability (often caused by older third party modules), attacker could use it to change admin password, and then log in (basically the same mechanism described above). With the requirement to change signature as well, this no longer works.

You can use force-login php script to log into your admin, see this post: 

 

You will have to:

1. upload force-login.php file into your admin123xyz directory (every installation have different admin folder name)
2. open url https://your.store/admin123xyz/force-login.php
3. this will logs you in as an admin
4. change password
5. delete force-login.php script 

[Yabber]

12 hours ago, Madhosh said:

I tried to reset my password but I don't get my new password anymore.

It is likely that, following the upgrade, neither the ‘Mail via PHPMailer’ nor the ‘Mail via SwiftMailer’ email transport module has been configured.

Since version 1.6.0, email is no longer supported via the PHP mail() function.