Vendor titles reset when they do a password reset

• Author
  Posts
• 

  joelblack 1 year ago

  Can you guys help on this pretty quickly. We just launched today, and every single vendor title reset to their username on their listing when they did a password reset.

  https://drive.google.com/file/d/1DAXScRev8b5-kYVNKn4AnSNLiPiaAP96/view

  

  yevhen 1 year ago developer

  Thank you for reporting this bug. We will fix it as soon as possible.

  

  ihor 1 year ago developer

  Sorry for the confusion – this is not a bug, vendor names are always in sync with their linked users, so if you edit the vendor name directly in WordPress/Vendors it’ll be changed on any user update (e.g. resetting password or re-saving the account settings). Please adjust this in HivePress/Settings/Vendors/Display, e.g. if you create a vendor attribute like Company you can choose it in settings so the vendor name will be in sync with the attribute value (instead of username, first or last name of user).

  

  joelblack 1 year ago

  That is a major security flaw. You are resetting listings to usernames, I can not see how that would ever be a feature. And why would a user want their listings reset every time they reset a password? Plus, they don’t even have to reset their password, all they have to do is request a password reset. So I as a hacker could go in and do password resets for listings and expose the username, and have half of what I needed to hack into the system.

  

  joelblack 1 year ago

  This still doesn’t seem to be working as it should, please see this video where I am setting it up exactly like you suggested. But it still resets the vendor name to the username when a user resets the password. Just happened again today.
  https://drive.google.com/file/d/1HjcrAENBORXwBV8WJtrTgX7KH1ojGG1Q/view

  

  ihor 1 year ago developer

  HivePress doesn’t enforce any specific vendor names (e.g. usernames), this is just the default setting – please change it in HivePress/Settings/Vendors/Display and/or Users/Display section. You can sync vendor names with user display names (usernames, first/last or full name – this can be changed in Users settings) or some specific vendor attribute.
  I know this may be confusing and we’ll try to improve the UX, but vendor profile details like name, description, image shouldn’t be edited directly, because the next time user updates their profile settings (or reset password, or any other user update action) these details will be synced and any direct changes will be lost.
  For example, on JobHive demo https://jobhive.hivepress.io/ vendor names are in sync with the Company attribute, so users can set their first name, last name and company name separately – and their vendor profile will display the company name (the Company attribute is selected as the vendor name in HivePress/Settings/Vendors/Display section).

  

  joelblack 1 year ago

  This is not right, this is broken I can assure you. Why would resetting a password disconnect a vendor’s reviews and also reset their vendor name to their username? It does not make any kind of UX, UI, or database sense.

  please change it in HivePress/Settings/Vendors/Display

  I have already done this, not working as expected. Still changes the vendor listing name even thought it’s set to a custom field called “Company name” and set to display that in settings.

  the next time user updates their profile settings (or reset password, or any other user update action) these details will be synced and any direct changes will be lost.

  Why would this be considered as “working correctly”? People forget passwords. Why would a vendor want their vendor profile name “reset” because they forgot their password?

  For example, on JobHive demo https://jobhive.hivepress.io/ vendor names are in sync with the Company attribute, so users can set their first name, last name and company name separately – and their vendor profile will display the company name (the Company attribute is selected as the vendor name in HivePress/Settings/Vendors/Display section).

  Again, I have set it up this way based on your feedback. Reviews still get disconnected and vendor title still resets, even though we have it set to show a custom field on the listing as the company name. It’s not working.

  

  joelblack 1 year ago

  Update, it also removed the featured image! That is another that would not ever be beneficial to anyone? Every time I reset my password, I have to go back in and re-add my featured image!

  To recap, EVERY time ANY vendor request a password reset
  1. Vendor listing feature image removed
  2. Vendor reviews disconnected and have to be reconnected
  3. Vendor title gets reset to username and displays in listings, even though we have set the display to be a custom field called “Company Name”

  

  ihor 1 year ago developer

  In the current version, the vendor’s name, description and featured image are in sync with their linked user. All these issues occur because you edited vendor profiles directly in WordPress/Vendors section, so the next time the linked user is updated (via the password reset, re-saving profile settings or any other user update action) the details are synced again and direct changes you made to the vendor profile are lost (so if you update a user the vendor name, description and image sync with the user fields). For example, if you set the featured image directly, and the linked user has no profile image, the featured image will be reset on user update (password reset, etc) because this user has no profile image and this will sync with their vendor profile – this is how it works in the current version, the vendor profiles are based on the linked user accounts.

  We probably should disable editing vendor profiles for these default fieds (name, description and image) to avoid confusion and improve the UX. If the current workflow breaks your site (e.g. if you edited too many vendor profiles directly already) please let me know and I’ll provide a snippet to disable syncing, but this may break updating vendor profiles via the front-end (since user account settings also update vendor profiles).

  

  ihor 1 year ago developer

  I’ll also describe the steps that cause this issue, hope this helps:
  1. Edit vendor profile directly in WordPress/Vendors section, changing the name, description and setting the featured image.
  2. Update the vendor user in any way (reset password, re-save settings, etc), then the name, description and image are reset because the user account has no profile image, and the name & description fields are empty for this account.

  Since user account details have higher priority than their vendor profile details and they sync & override them, updating these should be done this way:

  Back-end:
  1. Edit user in WordPress/Users section, save changes.
  2. Common user/vendor details like name and description are updated for their linked vendor profile in WordPress/Vendors automatically.

  Front-end:
  1. Login as a vendor user, update details in My Account/Settings.
  2. The user account details (name, image, description) are automatically updated for their linked vendor profile.

  If you already edited many vendor profiles directly please let me know and I’ll try to find a workaround for this, maybe via a snippet that will iterate over vendor profiles and update these details for their linked users, then it should be ok.

  

  joelblack 1 year ago

  Vendors keep resetting their password because they forget it and it keeps breaking everything. It is impossible to manage, I have to go and reset up their vendor profile every time they forget their password. I have even had to hide the forgot password link with CSS because it is unmanageable, but I can’t even reset a password through the admin for them, because it also resets everything.

  I do not need front end editing at the moment, so any snippet you can give me for it to stop doing this will be very appreciated. Part of our service is setting up the vendor profiles professionally for the vendor, and every time a vendor resets their password, it resets everything we have put together to make their profile stand out.

  

  joelblack 1 year ago

  Please see this video. I have deactivated plugins and tested every scenario possible. Your plugin “Hivepress” forces the “First Name” into the vendor listing title. You cannot change it. You cannot change your display_name, your plugin deactivates the ability to set a display_name in your profile. It also will not let you change the Vendor name to a custom vendor attribute, it does not work. I have done extensive testing on this, and I am outlining the problem so that it is crystal clear. This is thousands of dollars worth of user testing I am giving you for free. Can we please fix this?

  https://drive.google.com/file/d/1aHvBFhR6QRFqZQMwU3GxUXAPpi-EunYE/view

  

  ihor 1 year ago developer

  Sorry for the confusion, but it’s not related to resetting passwords – the same issue would occur with any other user update action because user details have higher priority than their vendor profile details, so anytime you update the user account the user details (name, description and image) are synced with their vendor profile, overriding any direct changes you made in Vendors/Attributes section.

  I guess we should block editing the vendor name, description and image directly to prevent this confusion, or add some function that would sync vendor details with users the other way around (e.g. when vendor profiles are edited directly via the WP back-end).

  Vendor profile gets the linked user first name because User Name is selected in HivePress/Settings/Vendors/Display section. If you selected some custom attribute there and vendors still get user’s name instead of the attribute value please send temporary WP access to support@hivepress.io and I’ll check this issue.

  

  joelblack 1 year ago

  We found a workaround. You should put this in some documentation somewhere or fix this flow, this is not intuitive at all. To get a custom field to show as the company name, you have to do these steps in this order:

  1. Add the company name to the custom field and update the vendor.
  2. Go to the vendor user account and update the user profile

  Doing it in that exact sequence triggers the vendor listing to show the custom field.

  

  ihor 1 year ago developer

  Thanks for sharing. We’ll improve the docs as soon as possible, indeed the process of adding/editing vendors manually via the WP back-end is not clear at the moment.

• Author
  Posts

New Reply

This forum has been archived and is no longer accepting new posts or replies. Please join our new community forum for support & discussion.